The current description for this Event Notification is 'A user successful logged in but failed an MFA attempt.' This notification shows the triggered values but we have to go into perchybana to see all the details. If its possible to include the LOCATION of the successful sign in right in the alert, that would make it even more useful.