Configure Device Registration for a Risk-Based Authentication Policy

Device registration is the process of saving a user's authentication device in the user's device history list. Each device in the list was used during a previous, successful logon. When the user tries to access an RBA-protected resource using a registered device, the authentication attempt is likely to have a higher assurance level.

The system can register a new device automatically, or users can choose to register the device. If you expect users to access RBA-protected resources from public or shared devices, you may want to allow them to decide which devices they want to register.

Procedure 

1. In the Security Console, click Authentication > Policies > Risk-Based Authentication Policies > Manage Existing.

2. Click the policy that you want to configure, and select Edit.

3. In the Device Registration and Identity Confirmation Settings section, select one of the following for New Device Registration:

   • To add the device to the user device history automatically after authentication, select Register the user authentication device automatically after successful authentication.

   • To prompt the users to choose if they want to add the device to the device history, select Prompt the user to choose whether the system registers the device after successful authentication.

4. Click Save.