What is risk-based authentication in SAP BC-IAM-SSO - SAP Single Sign-On?

SAP Term: risk-based authentication

• Component: BC-IAM-SSO

• Component Name: SAP Single Sign-On

• Description: An authentication mechanism that dynamically defines the user authentication based on the risk of the user’s profile.

Smart SAP Assistant

• Key Concepts: 
  Risk-based authentication is a security measure used in SAP Single Sign-On (BC-IAM-SSO) to protect user accounts from unauthorized access. It works by assessing the risk associated with a user’s login attempt and then taking appropriate action based on the risk level. For example, if the risk level is high, the user may be asked to provide additional authentication information such as a one-time password or biometric data.
  
  How to use it: 
  Risk-based authentication can be enabled in SAP Single Sign-On by configuring the Risk Analysis Service. This service will assess the risk associated with each login attempt and take appropriate action based on the risk level. The action taken can range from allowing access without any additional authentication to requiring additional authentication information such as a one-time password or biometric data.
  
  Tips & Tricks: 
  When configuring the Risk Analysis Service, it is important to consider the balance between security and usability. If the risk threshold is set too low, users may be asked for additional authentication information too often, which can lead to frustration and decreased productivity. On the other hand, if the risk threshold is set too high, users may not be adequately protected from unauthorized access. 
  
  Related Information: 
  For more information about configuring and using risk-based authentication in SAP Single Sign-On, please refer to the official documentation at https://help.sap.com/viewer/product/SAP_SINGLE_SIGNON/2.0/en-US