diff --git a/backend/src/main/java/edu/internet2/tier/shibboleth/admin/ui/configuration/CoreShibUiConfiguration.java b/backend/src/main/java/edu/internet2/tier/shibboleth/admin/ui/configuration/CoreShibUiConfiguration.java
index 4781fe0c0..66ad8db9d 100644
--- a/backend/src/main/java/edu/internet2/tier/shibboleth/admin/ui/configuration/CoreShibUiConfiguration.java
+++ b/backend/src/main/java/edu/internet2/tier/shibboleth/admin/ui/configuration/CoreShibUiConfiguration.java
@@ -58,12 +58,17 @@
 import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
 import org.springframework.boot.context.properties.EnableConfigurationProperties;
 import org.springframework.boot.web.client.RestTemplateBuilder;
+import org.springframework.context.ApplicationEventPublisher;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.ComponentScan;
 import org.springframework.context.annotation.Import;
 import org.springframework.context.support.ResourceBundleMessageSource;
 import org.springframework.core.io.Resource;
 import org.springframework.jdbc.core.JdbcTemplate;
+import org.springframework.security.authentication.AuthenticationEventPublisher;
+import org.springframework.security.authentication.DefaultAuthenticationEventPublisher;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.AuthenticationException;
 import org.springframework.web.servlet.LocaleResolver;
 import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
 import org.springframework.web.servlet.config.annotation.PathMatchConfigurer;
@@ -293,4 +298,24 @@ public List<URL> beaconEndpointUrl(@Value("${shibui.beacon.url}") String urls) t
         }
         return result;
     }
+
+    @Bean
+    public AuthenticationEventPublisher authenticationEventPublisher(ApplicationEventPublisher applicationEventPublisher, UserService userService) {
+        return new RecordLoginHandler(applicationEventPublisher, userService);
+    }
+
+    class RecordLoginHandler extends DefaultAuthenticationEventPublisher {
+        private UserService userService;
+
+        public RecordLoginHandler(ApplicationEventPublisher applicationEventPublisher, UserService userService) {
+            super(applicationEventPublisher);
+            this.userService = userService;
+        }
+
+        @Override
+        public void publishAuthenticationSuccess(Authentication authentication) {
+            super.publishAuthenticationSuccess(authentication);
+            userService.updateLoginRecord(authentication.getName());
+        }
+    }
 }
\ No newline at end of file