Hi Todd,
did you solve your request? I have the same event here in our SIEM tool and i am new to Apple. I would guess that the event legitimate but i would like to know what authentication failed.
Specs of the endpoint:
MacBook Pro M2
macOs 14.4.1
Kind regards,
Maurice