Recent Activity

This is an Early Access feature. To enable it, use the Early Access Feature Manager as described in Manage Early Access and Beta features .

Recent Activity provides end users with information about sign-in and security event activity.

  • Sign-ins provides end users with increased visibility into their account by summarizing a list of their most recent sign-in activity to Okta.
  • Security Events provides end users with a summarized list of recent security events from their Okta account.

Sign-ins and Security Events details

  • Sign-ins feature relies on a System Log event called user.authentication.verify. This event is fired when an end user completes authentication to sign in to Okta.
  • Security Events logs primary and secondary email updates, password change events, factor enroll and reset events from the most recent days.
  • The Sign-ins and Security Events features are only supported in the new Okta End-User Dashboard, which is currently a self-service Early Access feature. If end users revert to the old dashboard, these features will not be available.

Recent Sign-ins

Sign-ins provides end users with a summarized list of their most recent sign-in to Okta.

When enabled, this feature:

  • Shows up to the last 100 sign-in attempts or activity up to the last 30 days.
  • Groups information by the device used to sign in to Okta.
  • Provides end users with a device link for viewing recent sign-in details.
  • Shows an approximate location for recent sign-in activity.
  • Provides end users with a button to report suspicious activity to their Okta admin directly.
  • Sign-ins provides end users with a summarized list of their most recent sign-in  to Okta.

Sign-ins information

After this feature is enabled, there are no additional settings to configure. End users will have access to the following Sign-ins information about their account:

Device

The device used by the end user to sign in to Okta. When a user clicks this link, detailed information is displayed for each sign-in activity:

  • IP Address
  • Location
  • Time
  • Browser
  • I don’t recognize this sign-in: Users can click the button to report unrecognized activity directly to their org admin.
Last Sign-in The most recent time that the device was used to sign in.
Last Sign-in Location The best effort or approximate location where the user signed in.
Total Sign-ins A summary of the total sign-in activity and location activity.
Report to admin Provides an option for the user to report potential suspicious activity directly to their admin.

Security Events

Security Events provides end users with a summarized list of recent security events from their Okta account. Security Events provides information about updates to primary and secondary email accounts, account password changes and MFA Factor reset and enrollment.

When enabled, this feature:

  • Shows up to the last 3 most recent security events and when they occurred.
  • Provides end users with more security events when they click the See more link.
  • Provides end users with a button to report suspicious activity to their Okta admin directly.
  • Provides end users with a message when no security events information is available.

    Security Events provides end users with a summarized list of recent security events from their Okta account.

Security Events information

After this feature is enabled, there are no additional settings to configure. End users will have access to the following Security Events information:

Security Events

When a user clicks a security event, detailed information is displayed for each security event:

  • Event
  • IP Address
  • Device
  • Location
  • Time
  • I don’t recognize this sign-in: Users can click this button to report unrecognized activity directly to their org admin

Note

Note

Device, IP and Location events can display with "Unknown", when the original event does not capture enough log information.

Related topics

Suspicious Activity Reporting

Sign-on notifications for end users

Factor enrollment notifications for end users

Factor reset notifications for end users

Password changed notification for end users