Send multiple Risk Events

POST {{baseUrl}}/api/v1/risk/events/ip

Sends multiple IP risk events to Okta. This request is used by a third-party risk provider to send IP risk events to Okta. The third-party risk provider needs to be registered with Okta before they can send events to Okta. See Risk Providers. This API has a rate limit of 30 requests per minute. You can include multiple risk events (up to a maximum of 20 events) in a single payload to reduce the number of API calls. Prioritize sending high risk signals if you have a burst of signals to send that would exceed the maximum request limits.

Request Body

{"0"=>{"timestamp"=>"2021-01-20T00:00:00.001Z", "subjects"=>[{"ip"=>"6.7.6.7", "riskLevel"=>"MEDIUM"}, {"ip"=>"1.1.1.1", "riskLevel"=>"HIGH", "message"=>"Detected Attack tooling and suspicious activity"}]}, "1"=>{"timestamp"=>"2021-01-20T01:00:00.001Z", "subjects"=>[{"ip"=>"6.7.6.7", "riskLevel"=>"LOW"}, {"ip"=>"2.2.2.2", "riskLevel"=>"HIGH"}]}}

HEADERS