Okta User Password and MFA Factor Reset or Deactivated

Google SecOps@GoogleSecOps

•updated Mar 12, 2025•0•0•0

Detects when an Okta user's password is reset and MFA factor(s) are deactivated or reset within a 30 minute time window. This activity may indicate that the user account has been compromised.