Pull masquerade events from the Canvas authentication audit log
Requires a Canvas admin API token with access to authentication audit logs. Regular instructor tokens will return empty results.
New Audit Scan
Scans the Canvas authentication log for all masquerade_as events. Large accounts may take 1–2 minutes.
Recent Scan History
No scans run yet.
Holon Technology
Connect to Canvas
An admin Canvas API token is required to read authentication audit logs.
1
In Canvas, click your profile picture → Settings
2
Scroll to Approved Integrations → click + New Access Token
3
Generate token, paste below
⚠ Canvas only shows your token once — save it or you'll need to regenerate.
Holon Shadow
Impersonation Audit
Security & compliance tool for Canvas administrators
1
Connect your Canvas admin API token via Settings (⚙)
2
Run a Scan from the Run Scan tab to pull masquerade events from Canvas
3
Review results on the Dashboard or browse the full Event Log
4
Export CSV for auditors, compliance reports, or external analysis
Canvas tracks masquerade events in its authentication audit log. This tool reads those events and surfaces who impersonated whom, when, and what URLs were accessed during the session.
Customize Theme
Changes apply instantly
General
Sidebar
Holon Technology
Getting Started with Holon Shadow
Audit and review activity across your Canvas course.
1
Run a scanStart an audit scan of your course from Run Scan.
2
Review eventsBrowse the Event Log to see what was found.
3
Track on the dashboardMonitor audit results over time.