Adaptive Access will Enforce both Stronger Security and Better User Experience

The trustlevel of an identity should meet the trustlevel of the requested access. That means that both the trustlevel of the requester and the required tustlevel of the access requested must be defined. MFA alone is not enough.

The trustlevel of an identity can on one hand be based on trust in an IdP and an Authentication Provider, and on the other on the context of the requester, sucg as location, time, device used. Conditional Access and Multifactor Authentication are technical controls for defining the trustlevel of an access requester. But adaptivity is more than just the context of an identity. Access Policy Management is where the magic happens.
In this presentation we show the concepts behind AdaptAcc and provide a structured method for implementing the solutions.

Key takeaways:

• The trustlevel of an identity should meet the trustlevel of the requested access.
• Both trustlevels cannot be met by MFA alone
• AdaptAcc is concerned about velivering both enough security and a good user experience