{
  "id": "evt-7c2a",
  "tenantId": "tenant-9f2a",
  "userId": "b29c4d7c-3a8e-4d52-8b9c-1f9d2e0a2c3b",
  "severity": "Info",
  "eventType": "User Login",
  "message": "User jane@example.com signed in via SAML SSO",
  "ip": "203.0.113.45",
  "userAgent": "Mozilla/5.0",
  "createdAt": "2026-05-22T10:15:00Z"
}