User IP in Blocked State

Detects when a user's IP address is blocked in Okta and cannot login. For this check, Identity Intelligence analyzes data from multiple sources, including: Okta ThreatInsights, Networks Zones, phishing attempts, and suspected toll fraud.

Based on the outcomes of these events, the user's IP address may be blocked in Okta. Policy Declined events are not evaluated in this check.

This check enables help desk teams to quickly identify the users associated with blocked IP addresses, as well as the reason behind the block.

Recommended Actions

Please investigate to understand why this user was blocked, and escalate as necessary.

Compatibility

Okta