Potential Okta Password in AlternateID Field — Detection Rule

Detects when a user has potentially entered their password into the username field, which will cause the password to be retained in log files.

Read the full analysis on IntelFusions