# Okta support system 2023: diagnostic files can carry live account authority

Source: https://www.web3sec.news/blog/okta-support-session-tokens
Updated: 2026-11-08

Assign owners and record supporting evidence in your team's own system.

- [ ] Classify support captures as potentially credential-bearing.
- [ ] Sanitize analysis copies and restrict originals.
- [ ] Verify audit events for every attachment access path.
- [ ] Review browser synchronization of managed credentials.
- [ ] Revoke embedded sessions and investigate their subsequent use.

## References
- [Okta: support-system root cause and remediation, 3 November 2023](https://sec.okta.com/articles/2023/11/unauthorized-access-oktas-support-case-management-system-root-cause/)
- [Okta: initial support-system advisory, 20 October 2023](https://sec.okta.com/articles/2023/10/tracking-unauthorized-access-oktas-support-system/)