Okta Identity Cloud
Identity and access management (IAM) — Okta
What is this product?
A vendor-independent identity system that records events in its System Log with fields such as `actor.alternateId` and `outcome.result`, and can suspend a user or block a network zone.
About the company
A US company founded in 2009, specialising in identity management and single sign-on for cloud applications, widely used by technology companies.
What does an analyst do inside it?
- Searches the System Log for the user's events.
- Reads `outcome.result` to see whether the attempt succeeded or failed.
- Notices repeated attempts from a single address.
- Suspends the user or clears their sessions when needed.
Its search language
These examples are written in the syntax the product itself accepts.
- actor.alternateId: admin@example.com
- outcome.result: FAILURE
The field names it uses
- actor.alternateId
- client.ipAddress
- eventType
- outcome.result
- client.device
- target.type
Practise it now
Pick this product inside the simulator and the field names, search language, severity wording and response actions all switch to match how it works.
Open the simulatorWhere does it show up in the job market?
Common at technology companies and platforms; learning it helps because its identity-event logic resembles other systems.
Tools in the same category
The content is educational and follows the product's style. ShiftZero is not affiliated with the vendor and does not run its software.