Create IT login incidents for helpdesk before SLAs lapse

Your login webhook events land unrecorded, causing missed triage and SLA exposure for support teams. Consolidate those logins into searchable incident records so helpdesk and project managers acknowledge them by morning standup.