The system uses the access risk corrections when it computes the final risk score. The access risk corrections allows the system to:
-
Define the appropriate authentication level.
-
Return the authentication mechanisms authorized for the user.
Prerequisite
Configuration
🎯 To access Access Risk Corrections, click:
-
Access Risk -> Access Risk Corrections
-
Authentication → Authentication Mechanisms
-
System -> Configurations -> Access Risk Service and import or export a file.
|
Property |
Type |
Mandatory |
Description |
|---|---|---|---|
|
id
|
|
Mandatory |
The unique identifier of an existing authentication mechanism. |
|
name |
|
Mandatory |
The name of the configuration item. |
|
description |
|
optional |
The purpose of the configuration item. |
|
riskCorrection |
|
optional |
A positive value that reduces the existing user risk when the Identity authenticates using this authentication mechanism. This value computes the final authenticated risk. |
Example
<kit:DataSet xmlns:kit="http://www.memority.com/toolkit/1_0" xmlns:riskrba="http://www.memority.com/risk/rba/1_0" xmlns:rule="http://www.memority.com/toolkit/rule/1_0" xmlns:search="http://www.memority.com/toolkit/search-expression/1_0" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" tenant="memority" env="embedded,test,no-dev">
<riskrba:AuthenticationMechanismDefinition id="test_authenticationMechanism">
<name>Name of test_authenticationMechanism</name>
<riskCorrection>40</riskCorrection>
</riskrba:AuthenticationMechanismDefinition>
</kit:DataSet>