
d0o49 (d0o49) asked a question.
I see this result when I do a search on okta external authentications - These results are sorted and parsed but here is sample output
user display name device result
system@okta.com Okta System WEB SUCCESS
system@okta.com Okta System WEB SUCCESS
These 2 results are in different countries, not sure why we are seeing this. Any thoughts ?

To me,
these are okta service action events w.r.t. AD agent or any other...
for instance,
i see the same when import runs from AD/user authenticates against AD and so on..
Hi Bhaskar, thanks for the information. I guess my question is if I see these events at our office location it definitely makes sense. But we are seeing this in remote parts - say south america, germany etc. Is there a reason why this okta service might be running in different countries? or is this expected behavior as well?
Thanks,
Sai