3 ms·
I'm curious about Okta's customer facing audit logs. It seems they do offer audit logs [1] [2] but I can't find the documentation on what all events are include
by wizwit999 5y ago
I'm curious about Okta's customer facing audit logs. It seems they do offer audit logs [1] [2] but I can't find the documentation on what all events are included and if actions by support are (which they should). Google for example includes transparency events in it's audit log [3], CloudTrail also shows actions taken by AWS support.
I've talked about this before [4] but just having internal audit logs doesn't cut it nowadays, even in this case it took two months to check the audit logs, you should give your customers access to their audit logs, ideally in near realtime so they can do proactive monitoring.
[1] https://help.okta.com/en/prod/Content/Topics/Reports/Reports_SysLog.htm https://help.okta.com/en/prod/Content/Topics/Reports/Reports...
[2] https://developer.okta.com/docs/reference/api/system-log/ https://developer.okta.com/docs/reference/api/system-log/
[3] https://developers.google.com/admin-sdk/reports/v1/appendix/activity/access-transparency https://developers.google.com/admin-sdk/reports/v1/appendix/...
[4] https://apptrail.com/blog/2022/03/07/internal-vs-customer-facing-audit-logs https://apptrail.com/blog/2022/03/07/internal-vs-customer-fa...
- samcat116 5y agoApparently support actions can be found with "user.session.impersonation" from what I read.