diff --git a/web/saml.go b/web/saml.go
index ceebd009b3..38185b8254 100644
--- a/web/saml.go
+++ b/web/saml.go
@@ -84,8 +84,12 @@ func completeSaml(c *Context, w http.ResponseWriter, r *http.Request) {
 		relayProps = model.MapFromJson(strings.NewReader(stateStr))
 	}
 
+	c.LogAudit("attempt")
+
 	action := relayProps["action"]
 	if user, err := samlInterface.DoLogin(encodedXML, relayProps); err != nil {
+		c.LogAudit("fail")
+
 		if action == model.OAUTH_ACTION_MOBILE {
 			err.Translate(c.App.T)
 			w.Write([]byte(err.ToJson()))
@@ -126,12 +130,16 @@ func completeSaml(c *Context, w http.ResponseWriter, r *http.Request) {
 			})
 		}
 
+		c.LogAuditWithUserId(user.Id, "obtained user")
+
 		session, err := c.App.DoLogin(w, r, user, "")
 		if err != nil {
 			c.Err = err
 			return
 		}
 
+		c.LogAuditWithUserId(user.Id, "success")
+
 		c.App.AttachSessionCookies(w, r, session)
 
 		c.App.Session = *session