Intelligent Authentication ( IA) threshold values in Symantec VIP

Products

• VIP Service

Issue/Introduction

What are the different threshold values defined in Sign-in threshold value under the Policies->VIP Intelligent Authentication?

Resolution

Sign-in threshold values can be defined from the VIP Manager -> Policies -> VIP Intelligent Authentication screen. The lower the value, the higher the chance of step-up VIP MFA being triggered. A user will not be challenged for secondary authentication if the threshold is not reached. Risk scores can be seen in the End-user transactions reports. 

The following screenshots show the different settings and provide corresponding threshold values.

• When the settings are at the Strict level, the value for the threshold is 30. If the risk level during a login attempt is greater than 30, the user is challenged for Secondary Authentication.

• When the settings are at the Moderate-Strict, the value for the threshold is 50. If the risk level during a login attempt is greater than 50, the user is challenged for Secondary Authentication.
  

• When the settings are at the Moderate, the value for the threshold is 60. If the risk level during a login attempt is greater than 60, the user is challenged for Secondary Authentication.
  

• When the settings are at the Moderate-Tolerant, the value for the threshold is 70. If the risk level during a login attempt is greater than 70, the user is challenged for Secondary Authentication.
  

• When the settings are at the Tolerant, the value for the threshold is 80. If the risk level during a login attempt is greater than 80, the user is challenged for Secondary Authentication.