Okta Signon Policy Modification

Danny Y@zendannyy

•updated Dec 26, 2025•1•0•67

Detects events in Okta where there is the eventType of ~'policy.lifecycle' and the policy of 'OktaSignOn'. This will capture when new signon policies are created or updated. This could allow users to authenticate to Okta where the current policy does not apply. (i.e: enforcing MFA)