Assigning Adaptive Authentication Rules to Password Manager Polices
Adaptive Authentication rules can be assigned to any Password Manager policy to force users to undergo further identity proofing before they can access your environment under certain circumstances. EmpowerID provides two Adaptive Authentication rules that can be assigned to Password Manager policies out of the box, the CheckLoginSpeed and the CheckUserDemographics rule.
CheckLoginSpeed - This rule checks the current time and location of the person attempting to access your environment against the time and location of their last login to determine whether that person could reasonably do so under normal circumstances. For example, if the person logged in at 9:00AM from their office in Boston and then attempted to log in 45 minutes later from Seattle, this rule would consider the second log in attempt questionable as it would be impossible for the user to travel from Boston to Seattle in 45 minutes. The rule would then force the user to undergo further identity proofing.
CheckUserDemographics - This rule checks for missing person attributes, such as the user address or job title. If these attributes are missing, EmpowerID prompts the user to enter the missing information before proceeding.
If your organization needs more rules, you can create them in Workflow Studio and publish them to your environment. Once published, you can add them to to your Password Manager policies as shown in this article.
To assign Adaptive Authentication to Password Manager Policies
From the Navigation Sidebar, navigate to the Password Manager Policies management page by expanding Admin > Polices and clicking Password Manager Policies.
From the Policies tab of the Password Manager Policies management page, search for the policy to which you want to add an Adaptive Authentication Rule and then click the Display Name link for that policy.
This opens the Application Details page for the application. This page allows you to view information about the application and manage it as needed.
From the Policy Details page that appears, expand the Adaptive Authentication Rules accordion and then click the Add Rule (+) button to the right of the grid.
In the dialog that appears, do the following:
Select the rule you want to assign to the policy from the Rule drop-down.
Set the priority for the rule in the Priority field. The lower the number the higher the priority. When more than one Rule is assigned to an application, EmpowerID directs users to the rule with the highest priority first and then to the rule with the next highest priority and so on.