Adaptive MFA
Adaptive MFA is multi-factor authentication in which the strength of the challenge depends on the risk of the individual login attempt, assessed from device, network, location and behavioural signals.
What is Adaptive MFA?
Definition
Adaptive MFA (adaptive multi-factor authentication) is multi-factor authentication in which the strength of the challenge depends on the risk of the individual login attempt. Signals such as the device, network, location, time of day and behavioural pattern are assessed, and only a login that departs from the norm triggers an additional factor. In cybersecurity terms it replaces a fixed policy with a risk-based one — fewer prompts for routine access, and a harder gate exactly where an attacker is most likely to appear.
Role in cybersecurity
Adaptive MFA plays an important role in building organizational resilience against cyber threats. Implementing appropriate mechanisms in this area is required by regulations such as NIS2, DORA and ISO 27001.