Create an adaptive access policy

To create an adaptive access policy, follow these steps.

1. Start by logging into the Admin Console using an admin account.

2. From the left-hand menu, select Policies, and then Adaptive access.

3. Under the Adaptive access policy screen, you will see a listing of all already created policies. If this is a new Strivacity instance, then you will only see the default adaptive access policy.

4. To create a new policy, select Create.

5. Set up your adaptive access policy:

   1. You can manage the basic information of your policy in the General tab.
   2. You'll find the configurable multi-factor methods in the next tab.
   3. You can take various security measures to safeguard your applications.

7. Select Save once you're finished with the settings.

Modifying an adaptive access policy

To edit an adaptive MFA policy, or assign once you've edited it, simply follow the steps outlined in Manage policies.

If you make a change to an Adaptive MFA Policy that results in turning off a previously enabled MFA method, note that the following behavior will apply:

• Customers' existing MFA enrollment data will not be deleted (if you turn it back on, they will not have to re-enroll). This is a safeguard feature just in case an administrator switches off a method and you need to switch it back on again.
• That method will be immediately removed from the list of available MFA Methods (at Login and in Self-Service).
• If you turn off an MFA method and then re-enable it, and the customer no longer has access to that verification email or phone number, they may not be able to recover their account via self-service. Manual intervention via the helpdesk (Strivacity admin console) will be required.

⚠️

Modifying an existing policy (for example, by renaming it) may affect how reporting and analytics dashboards display historical data.

Historical data is not deleted, but some dashboards may only display information associated with the current version of a policy.

Before making significant changes to a production policy, consider whether reporting continuity is required for your organization.