{"actor": {"id": "00udu2s40phRtye7K5d7", "type": "User", "alternateId": "attacker@github.oktaidp", "displayName": "attacker x", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36", "os": "Mac OS X", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "23.93.213.13", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94619", "geolocation": {"lat": 37.7833, "lon": -122.1864}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "102D4UbcwYtQH2ccVL8PKXm5Q"}, "displayMessage": "Delete an Identity Provider", "eventType": "system.idp.lifecycle.delete", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2023-12-15T02:14:35.496Z", "securityContext": {"asNumber": 46375, "asOrg": "sonic.net  llc", "isp": "sonic telecom llc", "domain": "sonic.net", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"protocol": "OIDC", "requestId": "10fc3e0403cd5ba6fc2397511a17dba4", "dtHash": "5a60c5862cb128432dca3ac69c1b896d47690b9891501bf68f059647f4bda318", "requestUri": "/api/v1/idps/0oadup8giv0zAemm65d7", "url": "/api/v1/idps/0oadup8giv0zAemm65d7?issuerHint=true"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "10fc3e0403cd5ba6fc2397511a17dba4", "detail": {}}, "uuid": "b125a75e-9aef-11ee-9aaa-e50dcebb6450", "version": "0", "request": {"ipChain": [{"ip": "23.93.213.13", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94619", "geolocation": {"lat": 37.7833, "lon": -122.1864}}, "version": "V4", "source": null}]}, "target": [{"id": "0oadup8giv0zAemm65d7", "type": "IdentityProvider", "alternateId": "google_idp", "displayName": "attacker ADD Google IDP", "detailEntry": null}]}
{"actor": {"id": "00udu2s40phRtye7K5d7", "type": "User", "alternateId": "attacker@github.oktaidp", "displayName": "attacker x", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36", "os": "Mac OS X", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "23.93.213.13", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94619", "geolocation": {"lat": 37.7833, "lon": -122.1864}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "102D4UbcwYtQH2ccVL8PKXm5Q"}, "displayMessage": "Deactivate an Identity Provider", "eventType": "system.idp.lifecycle.deactivate", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2023-12-15T02:13:58.161Z", "securityContext": {"asNumber": 46375, "asOrg": "sonic.net  llc", "isp": "sonic telecom llc", "domain": "sonic.net", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"protocol": "OIDC", "requestId": "9bfe8ebb92ec680532de64c2c7674584", "dtHash": "5a60c5862cb128432dca3ac69c1b896d47690b9891501bf68f059647f4bda318", "requestUri": "/api/v1/idps/0oadup8giv0zAemm65d7/lifecycle/deactivate", "url": "/api/v1/idps/0oadup8giv0zAemm65d7/lifecycle/deactivate?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "9bfe8ebb92ec680532de64c2c7674584", "detail": {}}, "uuid": "9ae4c85d-9aef-11ee-b874-69a6ed90ed0d", "version": "0", "request": {"ipChain": [{"ip": "23.93.213.13", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94619", "geolocation": {"lat": 37.7833, "lon": -122.1864}}, "version": "V4", "source": null}]}, "target": [{"id": "0oadup8giv0zAemm65d7", "type": "IdentityProvider", "alternateId": "google_idp", "displayName": "attacker ADD Google IDP", "detailEntry": null}]}
{"actor": {"id": "00udu2s40phRtye7K5d7", "type": "User", "alternateId": "attacker@github.oktaidp", "displayName": "attacker x", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36", "os": "Mac OS X", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "23.93.213.13", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94619", "geolocation": {"lat": 37.7833, "lon": -122.1864}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "102D4UbcwYtQH2ccVL8PKXm5Q"}, "displayMessage": "Activate an Identity Provider", "eventType": "system.idp.lifecycle.activate", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2023-12-15T02:12:51.410Z", "securityContext": {"asNumber": 46375, "asOrg": "sonic.net  llc", "isp": "sonic telecom llc", "domain": "sonic.net", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"protocol": "OIDC", "requestId": "ffb8daf652d62da06fc11b50dd382fe4", "dtHash": "5a60c5862cb128432dca3ac69c1b896d47690b9891501bf68f059647f4bda318", "requestUri": "/api/v1/idps/0oadup8giv0zAemm65d7/lifecycle/activate", "url": "/api/v1/idps/0oadup8giv0zAemm65d7/lifecycle/activate?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "ffb8daf652d62da06fc11b50dd382fe4", "detail": {}}, "uuid": "731b6328-9aef-11ee-bf48-c3f26fe50e77", "version": "0", "request": {"ipChain": [{"ip": "23.93.213.13", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94619", "geolocation": {"lat": 37.7833, "lon": -122.1864}}, "version": "V4", "source": null}]}, "target": [{"id": "0oadup8giv0zAemm65d7", "type": "IdentityProvider", "alternateId": "google_idp", "displayName": "attacker ADD Google IDP", "detailEntry": null}]}
{"actor": {"id": "00udu2s40phRtye7K5d7", "type": "User", "alternateId": "attacker@github.oktaidp", "displayName": "attacker x", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36", "os": "Mac OS X", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "23.93.213.13", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94619", "geolocation": {"lat": 37.7833, "lon": -122.1864}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "102D4UbcwYtQH2ccVL8PKXm5Q"}, "displayMessage": "Deactivate an Identity Provider", "eventType": "system.idp.lifecycle.deactivate", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2023-12-15T02:12:48.931Z", "securityContext": {"asNumber": 46375, "asOrg": "sonic.net  llc", "isp": "sonic telecom llc", "domain": "sonic.net", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"protocol": "OIDC", "requestId": "1d41c281599b1c814c5ff4eefebad1fb", "dtHash": "5a60c5862cb128432dca3ac69c1b896d47690b9891501bf68f059647f4bda318", "requestUri": "/api/v1/idps/0oadup8giv0zAemm65d7/lifecycle/deactivate", "url": "/api/v1/idps/0oadup8giv0zAemm65d7/lifecycle/deactivate?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "1d41c281599b1c814c5ff4eefebad1fb", "detail": {}}, "uuid": "71a11fc9-9aef-11ee-bbee-7193b800cfde", "version": "0", "request": {"ipChain": [{"ip": "23.93.213.13", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94619", "geolocation": {"lat": 37.7833, "lon": -122.1864}}, "version": "V4", "source": null}]}, "target": [{"id": "0oadup8giv0zAemm65d7", "type": "IdentityProvider", "alternateId": "google_idp", "displayName": "attacker ADD Google IDP", "detailEntry": null}]}
{"actor": {"id": "00udu2s40phRtye7K5d7", "type": "User", "alternateId": "attacker@github.oktaidp", "displayName": "attacker x", "detailEntry": null}, "client": {"userAgent": {"rawUserAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36", "os": "Mac OS X", "browser": "CHROME"}, "zone": "null", "device": "Computer", "id": null, "ipAddress": "23.93.213.13", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94619", "geolocation": {"lat": 37.7833, "lon": -122.1864}}}, "device": null, "authenticationContext": {"authenticationProvider": null, "credentialProvider": null, "credentialType": null, "issuer": null, "interface": null, "authenticationStep": 0, "externalSessionId": "102D4UbcwYtQH2ccVL8PKXm5Q"}, "displayMessage": "Create an Identity Provider", "eventType": "system.idp.lifecycle.create", "outcome": {"result": "SUCCESS", "reason": null}, "published": "2023-12-15T02:12:17.596Z", "securityContext": {"asNumber": 46375, "asOrg": "sonic.net  llc", "isp": "sonic telecom llc", "domain": "sonic.net", "isProxy": false}, "severity": "INFO", "debugContext": {"debugData": {"protocol": "OIDC", "requestId": "639ccb978de6e583454ced58b23ea895", "dtHash": "5a60c5862cb128432dca3ac69c1b896d47690b9891501bf68f059647f4bda318", "requestUri": "/api/v1/idps", "url": "/api/v1/idps?"}}, "legacyEventType": null, "transaction": {"type": "WEB", "id": "639ccb978de6e583454ced58b23ea895", "detail": {}}, "uuid": "5ef3c80d-9aef-11ee-b15d-a1bd0b15b20e", "version": "0", "request": {"ipChain": [{"ip": "23.93.213.13", "geographicalContext": {"city": "Oakland", "state": "California", "country": "United States", "postalCode": "94619", "geolocation": {"lat": 37.7833, "lon": -122.1864}}, "version": "V4", "source": null}]}, "target": [{"id": "0oadup8giv0zAemm65d7", "type": "IdentityProvider", "alternateId": "google_idp", "displayName": "attacker ADD Google IDP", "detailEntry": null}]}