
WarrenM.49600 (Customer) asked a question.
Do okta logs let you know whether your users are logging in via a "non-UI" means?
I'm looking for a way to track non-UI attempted logins (via API, etc) in Okta. I'm interested in doing this because I want to track credential stuffing attacks. Is this info provided within auth logs?

Hi!
The best way would be to go to the system log and look after RawUserAgent that is below UserAgent. In this way you can find out if the user is authenticating from a Browser (and if yes, what browser, what version, etc), if he is authenticating from a mobile device or from a desktop, or it's showing like "PostmanRuntime/7.28.0" or some kind of library, you would know that it was by API.