Package okta/sso Release Notes

Package okta/sso Release Notes Version 1.4.6 (2025-12-01)
  • Updated ECS version to 9.2.0

  • Enhanced event outcome handling to include UNANSWERED and ABANDONED result types

  • Added support for additional event types including app.oauth2.token.grant, event_hook.delivery, system.push.send_factor_verify_push, and various system notification events

  • Improved code formatting and consistency throughout parser

  • Added new test cases for enhanced coverage

Package okta/sso Release Notes Version 1.4.5 (2025-10-02)
  • Updated ECS version to 9.1.0

  • Enhanced user.name field handling to automatically populate user.email when user.name contains @ symbol

  • Improved code formatting and consistency

Package okta/sso Release Notes Version 1.4.4 (2025-09-02)
  • Enhanced actor type handling with conditional logic for IP addresses and Event Hooks

  • Fixed client.user.full_name field mapping to handle different actor types appropriately

Package okta/sso Release Notes Version 1.4.3 (2025-08-26)
  • Enhanced target array parsing with improved regex pattern to handle whitespace variations in JSON structure

  • Fixed parsing of target arrays with flexible spacing between "target" field and array brackets

Package okta/sso Release Notes Version 1.4.2 (2025-08-25)
  • Enhanced timestamp parsing to handle events without published timestamp field

  • Improved target array parsing with better regex matching for JSON structure

  • Fixed handling of error message events that lack timestamp information

  • Updated parser version to 2.4.2

Package okta/sso Release Notes Version 1.4.1 (2025-08-05)
  • Fixed user agent field mapping from user_agent.device.name to user_agent.os.name

  • Updated CPS version to 1.1.0

Package okta/sso Release Notes Version 1.4.0 (2025-06-16)
  • Enhanced user target field handling to support multiple values

  • Added support for event hook delivery events

  • Improved event categorization with more comprehensive event type mappings

  • Added client fields including client.as.number and client.user fields

  • Added transaction.id and rule fields for better traceability

  • Added user_agent fields including device name and version

  • Updated ECS version to 9.0.0

Package okta/sso Release Notes Version 1.3.1 (2025-05-05)
  • Fixed source.user.full_name to use client.user.full_name instead of client.user.id

Package okta/sso Release Notes Version 1.3.0 (2025-03-10)
  • Removes flatten array logic for nested target array

  • Utilizes objectArray:eval() to retrieve target array User and UserGroup data

Package okta/sso Release Notes Version 1.2.0 (2025-01-09)
  • Categorizes "security.attack.start", "security.attack.end", and "security.breached_credential.detected" as alerts.

  • Utilizes array:append() function for array declarations.

  • Enhances categorization logic for policy user and authentication events.

  • Updates parser to handle more event types and improves field mappings.

  • Bumps ecs.version to 8.17.0.

Package okta/sso Release Notes Version 1.1.0 (2024-09-10)
  • Improves the field extraction and performance.

  • Bumps the minimum LogScale version to 1.142 to support assertions in yaml files.

  • Adds event.reason field

  • Sets the event.kind and event.category fields for threat events.

Package okta/sso Release Notes Version 1.0.0 (2024-04-16)
  • Adds new event.module and Cps.version fields

  • Removes the Product related.user and related.ip fields

  • Sets following tags: Cps.version, Vendor, ecs.version, event.dataset, event.kind, event.module, event.outcome, observer.type

Package okta/sso Release Notes Version 0.1.1 (2023-08-25)
  • Bumps the minimum supported version of LogScale from 1.15 to 1.82

  • Handles more elements in the target object

  • Fixes broken URL in the readme