Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

In EmpowerID, multi-factor authentication (MFA) is a flexible, points-based system that allows you to specify the number of factors that users must present when authenticating , as well as and the weight or point value associated with each of those factors. When users reach the designated point threshold, they are granted access to the system. You specify this threshold on the Password Manager policies associated with your users and each of the SSO applications Single Sign-On (SSO) application registered in the system. Each application has several MFA settings that can be configured according to your security requirements. Of Among these settings, those related to Level of Assurance (LoA) points include the following:

For each setting, LoA points start at 0, and you can increase them as needed. When the value is greater than exceeds 0, users must accumulate the required number of points before access is granted.

  1. Min Login LoA if Local

...

  1. This setting is used to specify the minimum number of points users within your local network must accumulate to authenticate.

  2. Min Login LoA if Remote

...

  1. This setting is used to specify the minimum number of points users outside of your local network must accumulate to authenticate.

Set LoA points

  1. On the navbar, expand Single Sign-On and click Applications.

  2. From the Applications tab of the Find Applications page, search for the application you want to apply LoA points and click the Display Name link for that application.

    Image Modified

  3. On the Application Details page that appears, click the Display Name link to put it in Edit mode.

    Image Modified

  4. From the application's Edit page, select the Single Sign-On tab and enter the following point values as applicable:
    Min Login LoA if Local – Specifies the minimum number of points users within your local network must accumulate to authenticate.
    Min Login LoA if Remote – Specifies the minimum number of points users outside your local network must accumulate to authenticate.

    Image Modified


  5. Once finished, click Add to Cart.

  6. Click the Cart icon at the top of the page, enter a reason for the change, and click Submit.

Insert excerpt
IL:External Stylesheet
IL:External Stylesheet
nopaneltrue