Application Policy Sign On Access Denied

Trigger a flow when an Okta user's app access is denied due to one of the user's current set of available authenticator enrollments.

Scopes

See Event cards for the list of required OAuth scopes needed by this card.

Output

Field Definition Type

Output

Date and Time

The date and time the event was triggered in the Okta API.

Text

Message

Message details about the event.

Text

Event ID

Unique identifier of the event.

Text

Event Type

Type of event that was published.

Text

Event Time

Time stamp when the notification was delivered to the service.

Text

Version

Versioning indicator.

Text

Okta User

Details about the Okta user who attempted to sign on.

Object

ID

The unique identifier of the Okta user.

Text

Alternate ID

Email address of the Okta user.

Text

Display Name

Display the name of the Okta user.

Text

Type

Type of Okta user.

Text

Global Application

The internal Okta app used to create an app for an Okta org.

Object

ID

The unique identifier of the Okta global app.

This value doesn't represent the ID of the Okta app where the user signed in.

Use the Okta Search System Logs action card to get the app ID. For example:

  • Custom Filter: debugContext.debugData.requestId eq "{Debug Context.Debug Data.requestId}" and eventType eq "policy.evaluate_sign_on"

  • Since: Event Time - 1 min

Text

Alternate ID

The alternate ID of the global app.

Text

Display Name

The display the name of the global app.

Text

Type

The type of the global app.

Text

UUID

Webhook event's universal unique identifier.

Text

Event Details

Raw JSON payload returned from the Okta API for this particular event.

Object

Headers

Object representing the headers for the response. Each key of the header is parsed into a header string as "key: value". For example, Content-Type: text/plain.

Object

Source

An API link to the associated Okta Event Hook.

Text

Debug Context

Object

Debug Data

Information on the triggered event used for debugging. For example, returned data can include a transaction ID to identify the app using the Okta Search System Logs action card.

Object

Related topics

Okta connector

Workflow elements

Guidance for Okta connector

Okta API documentation