What is Adaptive Authentication?

What is Adaptive Authentication?

Adaptive Authentication is a method for verifying a user identity based on contextual factors and risk assessment during a login or access attempt. Unlike static authentication approaches, Adaptive Authentication evaluates multiple variables in real time and decides the appropriate level of authentication. If a situation is evaluated as having a low risk of identity fraud, the user may only need to provide basic credentials.

If a situation is determined to be high-risk, the system may require the user to follow additional security measures like multi-factor authentication (MFA) or step-up authentication.

Key Features of Adaptive Authentication

Context-Aware Access

The Adaptive Authentication approach evaluates contextual factors such as location, device, time of access, and user behavior.

Risk-Based Analysis

The method assesses the risk level of a login attempt using pre-defined rules or machine learning models.

Dynamic Authentication

The authentication process adapts dynamically based on risk. For example, in a low-risk login scenario, a simple password or single sign-on (SSO) might suffice. In a high-risk instance, the system requires more sophisticated verification proof such as a one-time password (OTP), biometric authentication, or a requirement that the user provide answers to security questions.

Behavioral Analytics

Adaptive Authentication processes track user behavior patterns over time to establish a baseline and identify potential anomalies. These patterns include typical login times, frequently used devices, and from which IP addresses users log in.

How Adaptive Authentication Works

A user makes an initial login attempt to access a system or application.

The attempt triggers a context and behavior evaluation process with which the system analyzes various factors, including:

• Geolocation: Is the login coming from an unusual or risky location?
• Device Fingerprinting: Is the device known and trusted?
• Access Time: Is the attempt happening at an unusual time?
• IP Reputation: Is the IP address flagged for suspicious activity?
• User Behavior: Is the action consistent with the user’s historical behavior?

Based on the evaluation, the system assigns a risk score or categorizes the attempt as low-, medium-, or high-risk.

Once the attempt has been evaluated and categorized the system takes one of the following actions:

For low-risk scenarios: The system grants access with minimal friction for the user.

For medium-risk scenarios: The system requires the user to take additional verification steps, such as MFA.

For high-risk scenarios: The system blocks access for the user and/or escalates the attempt for manual review.

A Real-World Adaptive Authentication Example

Consider this example of how the Adaptive Authentication process uses dynamic evaluation of the user login process to ensure both security for the organization and convenience for the user:

A user who typically logs in from a desktop in Copenhagen between 8:00 and 9:00 CET attempts to log in from an unfamiliar mobile device in another country at 3:00 CET, this activity may trigger the adaptive authentication process to take one of the following actions:

• Flag the attempted login as high-risk.
• Prompt the user to verify their identity through a biometric scan or OTP.
• Potentially block the login if the evaluation process deems it suspicious.

Benefits of Adaptive Authentication

Enhanced Security

Dynamically responding to login attempts risks with Adaptive Authentication reduces the risk of unauthorized access to applications and sensitive resources.

Improved User Convenience

By simplifying authentication in low-risk situations, Adaptive Authentication enables legitimate users to avoid additional verification steps and decreases friction.

Easier Compliance

Adaptive Authentication helps organizations meet regulatory requirements for strong authentication, such as PSD2 and NIS2.

Fraud Prevention

Detects and mitigates identity theft, account takeover, and other malicious activities.

Scalability to New Applications and Environments

Organizations can scale Adaptive Authentication as business needs grow more complex and a more diverse set of users is added to the IT infrastructure.

Where to Learn More

Adaptive Authentication improves identity lifecycle management by verifying user identities in real-time and ensuring secure onboarding, access provisioning, and offboarding. It also helps detect anomalies during processes like role assignment, ensuring users only receive appropriate access when they need it and supporting the principle of least privilege. The additional scrutiny that applying Adaptive Authentication triggers works to enhance the Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models that are foundational to Identity Governance and Administration (IGA). Learn more.