Conditional MFA with rules
Learn how to use rules to challenge users only when certain conditions are met.
Rules can be configured within your actions to gain more control over when users are challenged. This can be useful when you want to reserve challenges for certain conditions, such as when a user is logging in from a new device.
Example of a new device rule
In the Authsignal Portal for your login
action, create a rule that triggers a challenge when a user is on a new device.
![](https://mintlify.s3-us-west-1.amazonaws.com/authsignal-23/images/docs/rules/new-device-rule.png)
Then include a deviceId
in your track action request for Authsignal to evaluate the rule.
You can also use the Authsignal Web SDK to
obtain the user’s deviceId
.
Create rules with your own data
While Authsignal provides a powerful set of predefined data points to create rules with, you may find yourself wanting to create rules based on your own data. For example, you may only want to challenge a user when their payment amount exceeds a certain threshold.
For your payment
action, you would create a rule that triggers a challenge when the payment amount exceeds a certain threshold:
![](https://mintlify.s3-us-west-1.amazonaws.com/authsignal-23/images/docs/rules/large-payment-rule.png)
Then include the paymentAmount
in your track action request for Authsignal to evaluate the rule.
Next steps
Was this page helpful?