This question came up during the recent application security audit â€“ how does PeopleSoft track user sign in attempts and locations.
Aside from the obvious PSOPRDEFN table there is PSACCESSLOG â€“ this table has OPRID, LOGIPADDRESS, LOGINDTTM, LOGOUTDTTM columns that give you information about user sign on activity. LOGIPADDRESS will contain the RemoteAddr property of %Request object, which is also useful in case you validate user ip address at the sign on. The only problem this could pose is in case your users are behind a single or multiple gateways that perform NAT. Then the value of this field would contain those NATed ip addresses and not the actual user ip addresses.