Alerts related to data source "OneLogin".
A disabled user attempted to authenticate via SSO
A successful SSO sign-in from TOR
A user accessed multiple unusual resources via SSO
A user connected from a new country
A user logged in at an unusual time via SSO
A user rejected an SSO request from an unusual country
Authentication attempt by a honey user
First connection from a country in organization
First SSO access from ASN for user
First SSO access from ASN in organization
First SSO Resource Access in the Organization
Impossible traveler - SSO
Intense SSO failures
IP Rotation Pattern in SSO Spray
Possible Impossible Travel Pattern - SSO
SSO authentication attempt by a honey user
SSO authentication by a machine account
SSO authentication by a service account
SSO Brute Force
SSO Password Spray
SSO with abnormal operating system
Suspicious SSO access from ASN
User attempted to connect from a suspicious country
Was this helpful?
