<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00006yPjlNCASOkta Classic EngineSingle Sign-OnAnswered2021-05-21T18:55:17.000Z2021-05-17T03:48:18.000Z2021-05-21T18:55:17.000Z

WarrenM.49600 (Customer) asked a question.

Do okta logs let you know whether your users are logging in via a "non-UI" means?

I'm looking for a way to track non-UI attempted logins (via API, etc) in Okta. I'm interested in doing this because I want to track credential stuffing attacks. Is this info provided within auth logs?


  • User15840126892072011556 (Vendor Management)

    Hi!

     

    The best way would be to go to the system log and look after RawUserAgent that is below UserAgent. In this way you can find out if the user is authenticating from a Browser (and if yes, what browser, what version, etc), if he is authenticating from a mobile device or from a desktop, or it's showing like "PostmanRuntime/7.28.0" or some kind of library, you would know that it was by API.

    Expand Post
This question is closed.
Loading
Do okta logs let you know whether your users are logging in via a "non-UI" means?