You can implement adaptive authentication by user, user group, IP address, Geo location etc. Generally speaking, adaptive authentication is controlled by logon policies. 

For the general guide to creating a logon policy, expand the link below

To create or edit a policy, we need to open the policy editor window first.

Select "Administration | Policies" on the side panel,


To create a new policy, click the "CREATE" button on the toolbar to open the policy editor window.


In the policy editor, firstly select Logon from the Category drop-down list

Policy Bindings

Enter or select the following policy bindings:
Holder:

The policy holder defines the scope of the policy. 

Name:An unique name that describe this policy
Applications:

Optionally, you can bind the policy to a specific applicaiton or a list of applications. To specify the application(s),  select the field: Apply policy to these applications

If the field Apply policy to these applications is left empty, then the policy will be applied to all applications. 

Policy Options

There are 3 authentication options:

  • Multi-Factor Authentication is not required for all users
  • Multi-Factor Authentication is required for users with tokens only
  • Multi-Factor Authentication is required for all user

Multi-Factor Authentication is not required for all users

This option means that all users will be exempted from 2FA or MFA. This option is typically used to exempt a group of users from 2FA or MFA. 

Multi-Factor Authentication is required for users with tokens only

This option means that users who have a 2FA/MFA token in their account will be enforced to login with 2FA/MFA, while those users who do not have a token 2FA/MFA token will be exempted from 2FA/MFA in the logon process. 

Multi-Factor Authentication is required for all users 

This option means that all users will be enforced to login with 2FA/MFA

Please note that users in the context of a policy include users in the scope of the policy only, i.e. the policy holder.

  • No labels