Confirm origin of suspicious event detected in Okta
This Automation is triggered by an event hook from Okta and is designed to respond to suspicious activity. It asks the user who performed the action if they did it. If the user denies responsibility for the action, the Automation resets the user's password and sends a notification to a specified Slack channel.
icon
icon
icon
Breakdown
  1. Set a Slack notification channel variable.
  2. Ask the user to confirm he performed the action in Okta.
  3. If the user denies responsibility for the action, the Automation resets the user's password and sends a notification to the Slack channel specified in the notification_channel variable.