Risk policy evaluation step

A step in the Journey Builder is a component used to configure and customize login, registration, or self-service journeys.

The Risk policy evaluation step evaluates a selected risk policy and branches the journey based on the result.

Capabilities

• Evaluates a risk policy as part of a journey.
• Provides one outcome for each result configured in the selected risk policy.
• Provides a failure outcome when the risk policy evaluation cannot produce a valid result.
• Lets you route each risk policy result to a different part of the journey.

Sample use cases

• Evaluate risk before a sensitive action and route customers to additional authentication when the policy returns a result that requires increased assurance.
• Evaluate risk during registration and route customers to additional verification based on the policy result.
• Route customers to a dedicated message or alternative journey path when the risk policy returns a result that should prevent them from continuing.

Configuration

To add a Risk policy evaluation step to your journey:

1. Open Journey Builder from the left-hand menu.
2. Create a journey or select an existing journey to edit.
3. Add a Risk policy evaluation step.
4. Configure the following settings:
   1. Name: Enter a name for the step.
   2. Select risk policy: Select the risk policy to evaluate.
5. Connect each outcome to the step that should follow it.

Outcomes

The step provides:

• One outcome for each result configured in the selected risk policy.
• failure: The risk policy evaluation could not produce a valid result. This can occur when a required risk signal does not produce a valid result or another error prevents the evaluation from completing.

For example, if the selected risk policy defines the results low, medium, and high, the step provides low, medium, high, and failure outcomes.

Notes and limitations

• The results configured in the selected risk policy determine the outcomes available from the step.
• A risk policy can define up to six results. The step can therefore provide up to seven outcomes, including failure.
• Risk policy results cannot be changed while a journey step references the policy. Remove the reference before changing the results.
• The failure outcome is separate from the results configured in the risk policy and is used when the evaluation cannot produce a valid result.