Conditional MFA with rules

Rules can be configured within your actions to gain more control over when users are challenged. This can be useful when you want to reserve challenges for certain conditions, such as when a user is logging in from a new device.

​

Example of a new device rule

In the Authsignal Portal for your login action, create a rule that triggers a challenge when a user is on a new device.

Then include a deviceId in your track action request for Authsignal to evaluate the rule.

​

Create rules with your own data

While Authsignal provides a powerful set of predefined data points to create rules with, you may find yourself wanting to create rules based on your own data. For example, you may only want to challenge a user when their payment amount exceeds a certain threshold.

For your payment action, you would create a rule that triggers a challenge when the payment amount exceeds a certain threshold:

Then include the paymentAmount in your track action request for Authsignal to evaluate the rule.

​

Next steps

• Using rules to target users
• Using your own data points
• Restricting authenticators with actions