SSF Transmitter

Okta uses the Shared Signals Framework (SSF) to send security-related events and other data-subject signals to third-party security vendors. In this scenario, commonly used terms for third-party vendors that receive signals are "receivers", Okta is the "transmitter", and the connection between the two entities is referred to as a "stream."

The SSF Transmitter API allows you to manage SSF stream configurations between the receiver that receives signals transmitted by Okta. Okta sends signals in the form of Security Event Tokens (SETs) to a third-party SSF receiver.

Okta's SSF Transmitter currently supports two types of CAEP events: Session Revoked and Credential Change.

The following Okta events are mapped to the CAEP Session Revoked event:

• user.session.end

The following Okta events are mapped to the CAEP Credential Change event:

• user.mfa.factor.activate
• user.mfa.factor.deactivate
• user.mfa.factor.suspend
• user.mfa.factor.unsuspend
• user.mfa.factor.update
• user.mfa.factor.reset_all
• user.account.reset_password
• user.account.update_password

To enable the transmission of signals from Okta, you must create an SSF Stream using the SSF Transmitter API and configure the third-party receiver to accept signals from Okta.