Impossible Travel

Compares the places where users log in from and raises a warning if they seem to have traveled between those places too quickly, faster than what's physically possible. Oort correlates information across IdPs and enriches this with external IP data to give the most accurate analysis of impossible travel. Users failing this check may be compromised.

NOTE - This check takes into account user device history. The both devices involved in the anomalous travel sign-in events are known or previously seen, the user will not fail the check for those events.

Recommended Actions

Please verify the account familiar with the events. If not, kill the sessions.

Compatibility

Okta

Entra ID

Duo

Salesforce

Last updated