Hi all,
We are in the FedRAMP region and earlier this month noticed significant amount of Directory updates in the Audit Viewer. This could be to the tune of hundreds per day. These updates are occurring multiple times a day to numerous directory users. When we compare the changed properties all we notice is the version is incrementing by one and no other values appear to be changing.
The Service Name is Directory
Entity Type is User
Action is Update
User Name is SYSTEM
Has anyone else ever ran across this scenario in their FedRAMP or other region? We believe it started earlier in July. We have opened a ticket with Support and they are helping investigate. We haven't discovered anything internal yet that could be making these daily directory updates and we aren't using SCIM.
Here is an example screenshot:
Thanks,
#API/Integrations#ArchitectandDesign#Security#System/PlatformAdministration------------------------------
Shane Jenkins
IT Sys Admin Mgr
------------------------------