Differentiate Okta Integration Network Application Creation From Updates
Last Updated:
Overview
Adding a pre-built integration from the Okta Integration Network (OIN) generates an application.lifecycle.update event instead of an application.lifecycle.create event in the System Log. Administrators can differentiate a new OIN application installation from a configuration change by filtering the request uniform resource identifier (URI) nested within the log event debug context. Security teams struggle to audit application lifecycle actions because the resulting event type is identical to standard application modification events.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- System Log
- Okta Integration Network (OIN)
- Application Lifecycle Management
Solution
How is an Okta Integration Network application creation differentiated from an update?
During initial instantiation, the HTTP POST request targets a new instance endpoint. Navigate to the System Log and execute a specific search query to isolate the request URI nested within the log event debug context.
- Navigate to the System Log.
- Enter the following search query in the search bar:
eventType eq "application.lifecycle.update" and debugContext.debugData.url co "/instance/_new_"
