SSO Redirect
| action | Description | Sample | Rule |
|---|---|---|---|
| sso_ | Automatic redirects for users to single sign-on (SSO) was disabled. | N | Y |
| sso_ | Automatic redirects for users to single sign-on (SSO) was enabled. | N | N |
sso_redirect.disable
#Description
Automatic redirects for users to single sign-on (SSO) was disabled.
Documented only in GitHub's enterprise audit log reference, not the organization or user audit log pages. Full rule details for this event, including ATT&CK technique mappings and native queries →Detection Rules #
YARA-L #
T1562
sso_redirect.enable
#Description
Automatic redirects for users to single sign-on (SSO) was enabled.
Documented only in GitHub's enterprise audit log reference, not the organization or user audit log pages.