okta adaptive mfa

Expression

product = "okta adaptive mfa"

Fields

Field	Core	Detection	Informational
src_ip		✓
domain		✓
fallback_user_name
domain_user_name
user	✓	✓

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
app-activity	object_type	Default			✓
	group_name	Default			✓
	location_country	Default			✓
	dest_user	Default		✓
	location_state	Default			✓
	uri	Default			✓
	url	Default			✓
	additional_info	Default			✓
	location_city	Default			✓
	members	Default			✓
	assigned_apps	Default			✓
	user_agent	Default			✓
	object	Default			✓
app-authentication	auth_type			✓
	object_type	Default			✓
	location_country	Default			✓
	dest_user	Default		✓
	location_state	Default			✓
	uri	Default			✓
	url	Default			✓
	additional_info	Default			✓
	location_city	Default			✓
	event_name	Default			✓
	operation	Default			✓
	user_agent	Default			✓
	object	Default			✓
app-login	user_agent	Default			✓
group-member-add	group_type	Legacy			✓
user-create	app
	object_type
	additional_info
	browser
	operation
	uri
	user_agent
	object
user-lock	group_name				✓
user-password-reset	app
	object_type
	additional_info
	browser
	operation
	uri
	user_agent
	object