Adaptive Authentication

Adaptive authentication offers the ability to dynamically deliver different multi-factor authentication (MFA) methods based on the risk assigned to an access attempt. For example, if an employee tries to access a company system from an unusual location or device, adaptive authentication might require additional verification steps like answering security questions.

The contextual factors used to calculate risk typically include location, device status, user behavior, user risk profile, and user role.

Each time an employee tries to authenticate, their request is evaluated and assigned a risk score. Depending on the risk score, the employee may be required to provide additional credentials to access company resources.

Our adaptive workflows allow your company to combine MFA with login risk analysis to step-up or step-down authentication methods based on your risk threshold for each company resource.

Your company can assign step-up authentication rules for different resources that require additional security:

• Device Recognition: Allow workers to auto-enroll their devices/browsers minimizing prompts to re-type their username, password or MFA.
• Geo-Location Analysis: A location anomaly will trigger a step-up MFA request to validate the worker’s identity.
• Behavioral Analytics: Benchmark worker behavior to identify suspicious activity. Stop bad actors or even insider threats exhibiting behaviors such as login attempts at odd hours, a change in login success or failure rates, or attempts to open restricted applications.
• IP Address Verification: Utilize IP address zones to improve security. Set up Accept and Deny IP Lists to simplify authentication for workers in trusted zones and reduce security risks coming from suspicious locations.

Integrate 3rd party risk assessment tools and utilize the analysis as part of the overall authentication risk score for every unique access request.

Leverage the intelligence of existing investments from IGA, SIEM, UEBA, or other tools to improve your company’s security protocols.