Hey there @etienne.leblan, I apologize for our delay in response. As far as your questions, our anomaly detection may be exactly what you are looking for. If not and you are looking to perform an action on a successful login then you can possibly leverage a rule to initiate a preferred course of direction. I have linked documentation on both below. However, if I am completely off base please let me know and I would be happy to help in any way I can. Thanks!