Comment on page
Suspicious Activity Reported by End User
Detects users that have reported suspicious or unrecognized activity to the organization’s admin from an email notification.
This check requires the "Suspicious Activity Reporting" feature to be configured in Okta.
Oort recommends you notify the user and admin channel. Oort allows the user to say the user made a mistake to reduce false positives. Please review the highlighted activity in the log to see the highlighted session.