JackM.99848 (Customer) asked a question.
Request from suspicious actor DENY 403 error
Is there a way to by pass this error for a user or is there a timeout where it removes it automatically? In okta and user's ip it says Request from suspicious actor
DENY
user can access okta from her phone hotspot but none of the computers within that network since its tied to the ip address.
Already added user's ip in the Network section under Zone and that didn't seem to work. Any guidence or would user just have to wait it out?
Hi @JackM.99848 (Customer) , Thank you for reaching out to the Okta Community!
If you've confirmed that the attempts are legitimate and the report is a false positive, the issue is most likely related to ThreatInsight.
Please check:
Okta Generates a "403 Access Forbidden" Error When Navigating to the Login Page
Unblock an IP Address Blocked by Okta ThreatInsight
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Collect them all. Learn a new skill and earn a new Okta Learning badge.
Just released: More Okta Community badges just added
The video in https://support.okta.com/help/s/article/unblock-an-ip-address-blocked-by-okta-threatinsight?language=en_US was spot on. I missed the 2nd step. Once that was done and in about an hour it worked for the user. Now i'm wondering in a few days or so, if i remove that user from the exempt zone (only user in there) will Okta then behave and make it work again as normal since our environment is set for anywhere?
Also, does that Okta automatically remove the blocked IP address after 24 hours? I remember reading it somewhere but it wasn't 100% guaranteed.
Good to hear! Yes, once the IP is not longer marked as suspicious it will be removed from the backend block-list after the 24 hours have elapsed.
Regards,
Mihai N.
Okta Community Engineer
-----------------------------------------------------------------
Visit the Okta Community to search for solutions or ask questions.
Level up your Identity security superpowers with Okta Learning.
The new Okta Help Center YouTube channel is your go-to resource for tips, troubleshooting, and best practice videos. Subscribe today.