Adaptive Authentication

Adaptive authentication offers the ability to dynamically deliver different multi-factor authentication (MFA) methods based on the risk assigned to an access attempt. For example, if a customer tries to access an app or portal from an unusual location or device, adaptive authentication might require additional verification steps like answering security questions.

The contextual factors used to calculate risk typically include location, device status, user behavior, user risk profile, and user role.

Each time a customer tries to authenticate, their request is evaluated and assigned a risk score. Depending on the risk score, the customer may be required to provide additional credentials to access company resources.

Our adaptive workflows allow your company to combine MFA with login risk analysis to step-up or step-down authentication methods based on your risk threshold for each company resource.

Your company can assign step-up authentication rules for customer applications and portals:

• Device Recognition: Allow customers to auto-enroll their devices/browsers minimizing prompts to re-type their username, password or MFA.
• Geo-Location Analysis: A location anomaly will trigger a step-up MFA request to validate your customer’s identity.
• Behavioral Analytics: Benchmark customer behavior to identify suspicious activity. Stop bad actors exhibiting behaviors such as login attempts at odd hours, a change in login success or failure rates, or attempts to open restricted applications.

Integrate 3rd party risk assessment tools and utilize the analysis as part of the overall authentication risk score for every unique access request.

Leverage the intelligence of existing investments from IGA, SIEM, UEBA, or other tools to improve your company’s security protocols.