
DarylG.63636 (Customer) asked a question.
I'm looking for a way to add an email address to the reporting emails sent by suspicious user activity reporting so that our ticketing system opens an incident for each report. I'd like to do this without the use of workflows.
Has anyone come up with a solution for this in your organization?

Hello @DarylG.63636 (Customer) Thank you for posting on our Community page!
One thing you can do is to set that email address with admin rights and have the notification on for the required emails.
You can also check the article below using Inline hooks:
https://help.okta.com/en-us/content/topics/security/suspicious-activity-reporting.htm#:~:text=Save%20changes.-,System%20Log%20events,Event%20Hooks%20Management%20API,-Related%20Topics
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.