- System Log
- Sign-on Policy
Sometimes, an Admin may change Okta policies for various reasons, such as testing a login or a new feature. To verify who changed the policy, the following steps or video can be used.
- Log in to the Admin Dashboard and navigate to Reports.
- Select System Log and enter the following query in the search bar:
eventType eq "policy.lifecycle.update" - Select the date or timeframe to search within. The result of the search will display all policy updates that occurred during that time.
-
- To verify who modified a policy rule, repeat the steps above but change the query to the following:
eventType eq "policy.rule.update"
- To verify who modified a policy rule, repeat the steps above but change the query to the following:
NOTE: To verify both events in the same query, use the following:
eventType eq "policy.lifecycle.update" or eventType eq "policy.rule.update"
