Multi-factor authentication

Labels

NameDescription
MFA authentication (success:mfa_authentication, failure:mfa_authentication)The MFA authentication process was either successful or failed.
Account lockout (failure:account_lock)An account lockout occurs if an account lockout is configured and the maximum number of attempts has been reached.

Phases

NameDescriptionOutcome nameOutcome description
Multi-factor authentication started (mfaChallengeSubflow)The multi-factor authentication phase has started.
  • MFA skipped (skipped)
  • MFA not available (notAvailable)
  • Finished (finished)
  • MFA has been skipped.
  • MFA is not available for the user to go through.
  • The multi-factor authentication phase has finished.
External Multi-factor authentication started (externalLoginMFAChallengeSubflow)Multi-factor authentication phase for the external login provider has started.

  • MFA skipped (skipped)
  • MFA not available (notAvailable)
  • Finished (finished)

  • MFA has been skipped.
  • An MFA is not available.
  • The multi-factor authentication phase has finished.
MFA selection started (mfaSelection)The MFA selection phase has started.
  • MFA chosen (mfaChosen)
  • MFA skipped (mfaSkip)
  • MFA not available (mfaNotAvailable)
  • An MFA method is chosen.
  • MFA has been skipped.
  • MFA is not available.
MFA challenge started (mfaChallenge)The MFA challenge started.
  • MFA authenticated (mfaAuthenticated)
  • The MFA has been authenticated.
Blocked by rule (blockedByRule)Blocked by a rule set up in Adaptive Rules.

Blocks

NameDescriptionOutcome nameOutcome description
Pre-MFA (preMfa)The need for MFA is being evaluated.
  • MFA needed (mfaNeeded)
  • MFA valid (validMFA)
  • MFA not available (notAvailable)
  • MFA is needed to continue.
  • MFA is valid.
  • MFA is not available.
MFA method assessment (mfaMethod)The MFA method is being assessed.
  • MFA chosen (chosenMFA)
An MFA method has been chosen.
MFA passcode (mfaPasscode)The user has chosen MFA via passcode.
  • Passcode valid (validPasscode)
  • Rejected (rejected)
  • The passcode was successful.
  • The passcode was rejected.
Magic link sent (magicLink)A magic link was sent for authentication.
  • Magic link accepted (magicLinkAccepted)
  • Magic link expired (magicLinkExpired)
  • Magic link rejected (rejected)
  • Magic link not clicked (magicLinkNotClicked)
  • The magic link was accepted.
  • The magic link expired.
  • The magic link was rejected.
  • The magic link was not clicked.
MFA soft token assessment (mfaEnrollSoftToken)The MFA soft token method is being assessed.
  • Valid (valid)
  • Rejected (rejected)
  • The MFA method was accepted.
  • The MFA method was rejected.
MFA web authentication assertion started (mfaWebAuthnAssertion)MFA enrollment via web authentication has started.
  • Authenticator valid (validAuthenticator)
  • Rejected (rejected)
  • The method was authenticated and successful.
  • The method was rejected.
Adaptive rule initiated (adaptiveRule)An adaptive rule has been triggered.
  • Step up initiated (stepUp)
  • Step down initiated (stepDown)
  • Block (block)
  • No operation occurred (noop)
  • The user was stepped up.
  • The user was stepped down.
  • The user was blocked.
  • No adaptive rule triggered.