QUESTION

Why can't I add the Panther-managed Okta.Devices and Okta.Users schemas

when setting up a native Okta log source?

ANSWER

The Okta.Devices and Okta.Users schemas are specifically designed for Panther's managed Lookup Tables and are used for data enrichment purposes rather than direct log ingestion.

For detailed information about how these enrichment providers work and their capabilities, you can refer to Panther's Okta Enrichment Provider documentation.