You are viewing an earlier version of the admin guide. For the latest version, please visit EmpowerID Admin Guide v7.211.0.0.

Assign Adaptive Authentication Rules to Password Manager Policies

Owned by Phillip Hanegan
Aug 21, 2023
2 min read

Adaptive Authentication rules can be assigned to any Single Sign-On (SSO) application to require users to undergo additional identity proofing before accessing the application under certain conditions. EmpowerID provides the following out-of-the-box Adaptive Authentication rules that can be assigned to policies:

  1. CheckLoginSpeed – This rule compares the current time and location of the person attempting to log in with the time and location of their last login to determine whether the login attempt is reasonable under normal circumstances. For instance, if a person logged in at 9:00 AM from their office in Boston and then attempted to log in 45 minutes later from Seattle, this rule would consider the second login attempt questionable due to the impossibility of traveling from Boston to Seattle within 45 minutes. The rule would then require the user to undergo further identity proofing.

  2. CheckUserDemographics – This rule examines missing person attributes, such as the user's address or job title. If these attributes are absent, EmpowerID prompts the user to provide the missing information before granting access to the application.

  3. CheckPersonProofing – This rule verifies if the person attempting to log in has satisfied the identity-proofing requirements for your organization. If not, this rule enforces further identity proofing.

Should your organization require additional rules, you can create them in the Workflow Studio and publish them to your environment. Once published, these custom rules can be added to your Password Manager policies as demonstrated in this article.

Assign Adaptive Authentication Rules

  1. On the navbar, expand Password Management and click Password & Login Policies.

  2. From the Policies tab of the Find Password Manager Policies page, search for the policy to which you want to apply Adaptive Authentication Rules and then click the Display Name link for that policy.

     

  3. From the Policy Details page that appears, expand the Adaptive Authentication Rules accordion and then click the Add Rule (+) button to the right of the grid.

     

  4. In the dialog that appears, do the following:

    1. Select the rule you want to assign to the policy from the Rule drop-down.

    2. Set the priority for the rule in the Priority field. The lower the number, the higher the priority. When more than one Rule is assigned to an application, EmpowerID directs users to the rule with the highest priority first and then to the rule with the next highest priority, and so on.

    3. Click Save.