Adaptive Authentication
Authentication flows that change based on risk signals. Low-risk sign-ins may complete with one factor; high-risk sign-ins escalate to step-up MFA or are blocked. Synonym in most contexts: risk-based authentication.
The value of adaptive authentication is that it lets you raise assurance without raising friction for everyone, which is the only way strong controls survive contact with a consumer funnel. The risk is that the signals are mostly heuristics: IP reputation, geo-velocity, and device fingerprints all degrade as attackers use residential proxies and real browsers. Treat risk scoring as a way to decide when to demand a phishing-resistant factor, not as a replacement for one.
See also: risk-based auth, conditional access, step-up auth, device posture
Related on Start with Identity
- GlossaryZero Trust
A security model where trust is never assumed based on network location and is continuously re-evaluated. Each access decision considers identity, device postur
- ArticleTop 5 Risk-Based Authentication Platforms for Adaptive Access Control in 2026
Compare the top 5 risk-based authentication platforms, RSA SecurID, Ping Identity, Transmit Security, BioCatch, and LexisNexis ThreatMetrix, to implement adapti
- ArticleTop 6 Adaptive Authentication Platforms in 2026
A detailed comparison of the top 6 adaptive authentication platforms, RSA SecurID, Ping Identity, TransUnion TruValidate, BioCatch, Transmit Security, and IBM S
- GlossaryABAC
Attribute-Based Access Control. Access decisions are made by evaluating attributes of the subject, resource, action, and environment against policy. Flexible bu
- GlossaryAccess Certification
Periodic review of who has access to what, with managers or resource owners attesting that access is still appropriate. A regulatory requirement in many industr
- BlogA 9.8-CVSS vCenter authentication bypass has no workaround, only an emergency patch
Broadcom shipped emergency fixes for three critical VMware flaws, including CVE-2026-59309 (CVSS 9.8), which lets any attacker with network access to vCenter by