View risk detections by user

While all risk detections are captured in the System Log, you can focus on risk detections associated with specific users. Use this information to monitor the activity for users with elevated levels of access or to troubleshoot.

  1. In the Admin Console, go to DirectoryPeople.

  2. Search and select the user to go to their profile page.

  3. Go to the Risk tab. The User-related detections table lists the session and entity risk detections for the user. You can also view details such as detection type, risk level, remediation action taken, and more.

  4. Optional. Click View System Log for a detection to get more context about the event.

  5. Optional. Click Provide Feedback to help improve Okta AI detections.

Related topics

Identity Threat Protection key concepts

Observability with Identity Threat Protection