IAM Event - Multiple Authentication Failures

EVENT

Authentication Failures - Any connected SaaS Application - Sent when 3 or more failures within 5 mins.

RECOMMENDED ACTION

Contact the Customer or User and make them aware of this event.  This event indicates a possible account compromise by an unauthorized actor due to repeated login failures within a minimal timeframe.  It is recommended to reset the password to a complex password and enable MFA if not already enabled.

ALERT TYPE

Alert