
0ot06 (0ot06) asked a question.
Need to pull report who reset their password using Forgot Password and used SMS as their MFA
Hi All,
I want to pull a report for users who rest their password using "Forgot Password" feature. It would be nice if I can find out who used SMS to verify their identity using Reset Password process.

Hi @0ot06 (0ot06) , Thank you for reaching out to the Okta Community!
A quick way to do it is to run queries in your system log. From there you could download/export and filter as needed.
The relevant query examples would be the following:
eventType eq "system.email.password_reset.sent_message"
eventType eq "system.sms.send_password_reset_message"
Other useful syslog information can be found here:
https://help.okta.com/en-us/Content/Topics/Reports/Reports_SysLog.htm
https://help.okta.com/en-us/Content/Topics/Reports/syslog-filters.htm
https://support.okta.com/help/s/article/Auditing-customer-support-actions-in-your-Okta-tenant-using-System-Log?language=en_US
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.