Skip to content
Sign In

okta:systemlog user.authentication.sso

user.authentication.sso

Log source
Okta System Log
Host type
Identity providers and SaaS (Okta, GitHub, Slack, ...)
Tier, host type
Recommended
Techniques
2
Rules depending on it
Elastic 2

Why this tier

By role

RoleTierBasis
Identity providers and SaaSRecommended

Techniques it helps detect

Rules that depend on it

Dataset version 0.5.3, built 2026-11-08, from public sources only. Vendor rule names, requirement text and ATT&CK content are reproduced as published; the links between them are the authors' analysis. See the references for each source, its version and its license.