Adaptive Authentication

Adaptive Authentication verifies the user's identity based on factors such as location, device status, and end-user context.

---

What you can do with it

Adaptive Authentication offers several business scenarios that enhance security and user experience:

• Deny access — block access for specific users or groups when they match predefined conditions, such as IP address range, group membership, or application access.

• Request specific authentication factors — require additional factors such as one-time passwords (OTP), push notifications, or biometric authentication for higher-risk applications, sensitive transactions, or both.

• Different rules for inside and outside networks — apply separate authentication policies for internal versus external network access. For example, stricter requirements can be enforced for external access to ensure security compliance.

• Grant access — bypass authentication for specific applications when users are within a designated network range, avoiding redundant authentication (for example, when users would otherwise be prompted again while already inside the same network). When access has been bypassed for an application, users log in directly using username or QR code without being asked for additional authentication factors.

Configure it

Adaptive Authentication is set up in the Admin Portal, where administrators create journeys by defining conditions and decision actions. For prerequisites and step-by-step configuration, see Configure Adaptive Authentication.