Enrich & remediate suspicious logins reported in Okta

Respond to and remediate user-reported suspicious logins in Okta. For each suspicious login, close any sessions for the targeted Okta account and send a Slack alert with enriched IP information and prompts to add the IP to a network block list or ignore the event.

Created by

Derek Wohlfahrt