Okta policy rule deleted

Set up the okta integration.



Detect when an Okta policy rule is deleted.


This rule lets you monitor the following Okta event to detect when a policy rule is deleted:

  • policy.rule.delete

Triage and response

  1. Contact the Okta administrator to confirm that the user: {{@usr.email}} should be deleting policy rules.
  2. If the change was not authorized, verify there are no other signals from the user: {{@usr.email}}.