From b33246b22f479e1c6d01844e8ce2d3cf8552c36c Mon Sep 17 00:00:00 2001
From: docs-bot <77750099+docs-bot@users.noreply.github.com>
Date: Mon, 20 Nov 2023 11:33:40 -0500
Subject: [PATCH] Update audit log event data (#46445)

---
 src/audit-logs/data/ghec/enterprise.json   | 10 ++++++++++
 src/audit-logs/data/ghec/organization.json | 10 ++++++++++
 src/audit-logs/lib/config.json             |  2 +-
 3 files changed, 21 insertions(+), 1 deletion(-)

diff --git a/src/audit-logs/data/ghec/enterprise.json b/src/audit-logs/data/ghec/enterprise.json
index 249cd13a26..d789b41f8c 100644
--- a/src/audit-logs/data/ghec/enterprise.json
+++ b/src/audit-logs/data/ghec/enterprise.json
@@ -1879,6 +1879,16 @@
     "description": "An organization owner viewed the organization's SSO recovery codes.",
     "docs_reference_links": "/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes"
   },
+  {
+    "action": "org.recovery_code_failed",
+    "description": "An organization owner failed to sign into a organization with an external identity provider (IdP) using a recovery code.",
+    "docs_reference_links": "/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable"
+  },
+  {
+    "action": "org.recovery_code_used",
+    "description": "An organization owner successfully signed into an organization with an external identity provider (IdP) using a recovery code.",
+    "docs_reference_links": "/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable"
+  },
   {
     "action": "org.register_self_hosted_runner",
     "description": "A new self-hosted runner was registered.",
diff --git a/src/audit-logs/data/ghec/organization.json b/src/audit-logs/data/ghec/organization.json
index d55f4e502e..19c59bd91d 100644
--- a/src/audit-logs/data/ghec/organization.json
+++ b/src/audit-logs/data/ghec/organization.json
@@ -1159,6 +1159,16 @@
     "description": "An organization owner viewed the organization's SSO recovery codes.",
     "docs_reference_links": "/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes"
   },
+  {
+    "action": "org.recovery_code_failed",
+    "description": "An organization owner failed to sign into a organization with an external identity provider (IdP) using a recovery code.",
+    "docs_reference_links": "/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable"
+  },
+  {
+    "action": "org.recovery_code_used",
+    "description": "An organization owner successfully signed into an organization with an external identity provider (IdP) using a recovery code.",
+    "docs_reference_links": "/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable"
+  },
   {
     "action": "org.register_self_hosted_runner",
     "description": "A new self-hosted runner was registered.",
diff --git a/src/audit-logs/lib/config.json b/src/audit-logs/lib/config.json
index b877aac7d4..55216a0790 100644
--- a/src/audit-logs/lib/config.json
+++ b/src/audit-logs/lib/config.json
@@ -1,4 +1,4 @@
 {
   "apiOnlyEventsAdditionalDescription": "This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.",
-  "sha": "c3bfcd805199dc232043577aeb31cb1887a20cbd"
+  "sha": "4e0c34a059d6f8f57f84f9c9e8ab32c8e40c04b7"
 }
\ No newline at end of file