Intelligent Authentication ( IA) threshold values in Symantec VIP
book
Article ID: 271784
calendar_today
Updated On:
Products
VIP Service
Issue/Introduction
What are the different threshold values defined in Sign-in threshold value under the Policies->VIP Intelligent Authentication?
Resolution
Sign-in threshold values can be defined from the VIP Manager -> Policies -> VIP Intelligent Authentication screen. The lower the value, the higher the chance of step-up VIP MFA being triggered. A user will not be challenged for secondary authentication if the threshold is not reached. Risk scores can be seen in the End-user transactions reports.
The following screenshots show the different settings and provide corresponding threshold values.
When the settings are at the Strict level, the value for the threshold is 30. If the risk level during a login attempt is greater than 30, the user is challenged for Secondary Authentication.
When the settings are at the Moderate-Strict, the value for the threshold is 50. If the risk level during a login attempt is greater than 50, the user is challenged for Secondary Authentication.
When the settings are at the Moderate, the value for the threshold is 60. If the risk level during a login attempt is greater than 60, the user is challenged for Secondary Authentication.
When the settings are at the Moderate-Tolerant, the value for the threshold is 70. If the risk level during a login attempt is greater than 70, the user is challenged for Secondary Authentication.
When the settings are at the Tolerant, the value for the threshold is 80. If the risk level during a login attempt is greater than 80, the user is challenged for Secondary Authentication.