Okta administrators receive numerous support ticket emails when automated scripts or individuals repeatedly submit forms on the Okta sign-in page. Administrators stop the emails by disabling the end-user help form or blocking the offending IP address. An administrator receives many emails with the following subjects:
[Okta Site] Feedback
[Okta site] Application access request
[Okta site] A user has a security concern!
[Okta site] Bug report
[Okta site] A user cannot log in
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Administration
- End User Help Form
Why does Okta generate multiple support ticket emails?
An individual or automated script triggers the emails by navigating to the Okta sign-in page, selecting Need help signing in?, choosing Help, and selecting a feedback option. The specific user actions prompt Okta to generate the corresponding email subjects:
| Email Subject | Triggering Action |
| [Okta Site] Feedback |
Sign in page > Need help signing in? > Help and clicking Send Feedback. |
| [Okta Site] Application access request |
Sign in page > Need help signing in? > Help and clicking Request help. |
| [Okta Site] A user has a security concern! |
Sign in page > Need help signing in? > Help and clicking Request help. |
| [Okta Site] Bug report |
Sign in page > Need help signing in? > Help and clicking Report a bug. |
| [Okta Site] A user cannot log in |
Sign in page > Need help signing in? > Help and clicking Request help. |
How do administrators resolve the support ticket email issue?
Administrators must block the client IP address that attacks the organization or disable the end-user help form entirely. Perform one of the following actions to resolve the issue:
-
Disable the end-user help form by reviewing the knowledge article: How to Disable the End User Help Form from the Sign-in Page.
-
Block the client IP address from accessing the organization by reviewing the knowledge article: Block an IP Address From Accessing an Organization Using a Network Zone.
NOTE: If the client IP address is dynamic and originates from a country not typically associated with site visits, administrators should review the knowledge article: Okta IP Access Policy.
