Suspicious Activity Reported

Trigger a Flow when suspicious activity is reported in Okta API.

Unless otherwise indicated, field types are text.


  • Date and Time: The date and time the webhook event was published.

  • Name: The name of the user who reported suspicious activity.

  • Email: The email address of the reporter.

  • User ID: The ID of the reporter.

  • Suspicious Activity Details: Details about the suspicious activity reported.

  • Full Details (object): The raw JSON payload returned from the Okta API.

See also