This slide deck explores the evolution of authentication mechanisms, advantages and the disadvantages of each, and how adaptive authentication may be the answer. Watch the webinar here: https://wso2.com/library/webinars/2019/01/adaptive-authentication-what-why-and-how/

1. Adaptive Authentication
What, Why and How?
Thanuja Jayasinghe, Associate Technical Lead - WSO2
Abilashini Thiyagarajah, Software Engineer - WSO2

2. WSO2 At-A-Glance
Colombo, London,
Mountain View, New York,
São Paulo, Sydney
Founded 2005,
Backed by Cisco and Toba
Capital
500+ Employees
(300 Engineers)
Open Source
525+ Customers,
100+ New Customers in 2018
53% YoY growth

4. Authentication

5. The process of recognizing a user’s identity in
order to provide access to a sensitive resource.

6. ● Password-based
● Challenge response
● Hardware token
● Software token
● Biometric-based
● Multi-factor authentication
● Adaptive authentication
Evolution of Authentication

7. Single-factor Authentication

8. OrOr Or

9. Convenience
Security

10. Multi-factor Authentication

11. And Or

12. Convenience
Security

13. Adaptive Authentication

14. Adaptive authentication is an evolved form of
multi-factor authentication(MFA) where the
authentication mechanism is decided depending
on the user’s risk profile and the behaviour.

15. Convenience Security

16. Security
Convenience Adaptability

17. Example:

18. Adaptive Authentication
Scenarios

19. Role-based Adaptive Authentication

20. User Age-based Adaptive
Authentication

21. Device-based Adaptive Authentication

22. Request-based Adaptive Authentication
View Balance Fund Transfer

23. Risk-based Adaptive Authentication

24. Geo location/IP-based Adaptive
Authentication

25. Geo Velocity Based Adaptive
Authentication

26. ● User attributes
● User behaviour
● Level of Assurance required
● Risk analysis statistics
● Machine learning algorithms
Evaluation Criterias

27. Adaptive Authentication with
WSO2 IS

28. • Supported from WSO2 IS 5.7.0
• Script-based control over authentication flow

29. Advantages of using WSO2
IS for Adaptive Authentication

30. ● Brings complex authentication policies in a simple
manner
● A comprehensive toolset to design your adaptive
authentication sequence
● Open, future-proof adaptive authentication
platform
● Designed to quickly integrate with risk engines and
external system

31. WSO2 IS Connectors

32. Demo

33. ● WSO2 IS documentation on Adaptive Authentication:
https://docs.wso2.com/display/IS570/Adaptive+Authentication
● [White paper] Keep calm and authenticate: Why adaptive is the
next big thing
https://wso2.com/whitepapers/keep-calm-and-authenticate-why-adap
tive-is-the-next-best-thing/
References

34. Upcoming Webinar on Adaptive
Authentication..
“Why upgrade your MFA to Adaptive Authentication?”
On Wednesday, February 6, 2019
Register at -
https://wso2.com/library/webinars/2019/02/why-upgrade-yo
ur-mfa-to-adaptive-authentication/

35. Q & A

36. THANK YOU
wso2.com