Disable a User for Risk-Based Authentication
Disabling a user for risk-based authentication (RBA) prevents the user from accessing RBA-protected resources. The system retains the user's RBA-related data, including the user's authentication history and device history. (Devices remain in the user device history according to the device administration settings in the RBA policy.)
Note: If the RBA policy allows users to become automatically enabled for RBA, then the user can become re-enabled for RBA. For more information, see Methods for Enabling Users for Risk-Based Authentication.
Procedure
In the Security Console, click Authentication > Risk-Based Authentication > Manage Enabled Users.
Use the search fields to find the user that you want to disable for RBA.
Click the user that you want to disable for RBA, and select Risk-Based Authentication.
Under RBA Settings, deselect Enable user for RBA.
Click Save.
Related Articles
Methods for Enabling Users for Risk-Based Authentication 6Number of Views Device Settings for Risk-Based Authentication 8Number of Views Configure Web-Based Application Logon Pages for Risk-Based Authentication 7Number of Views Custom Solutions for Web-Based Applications for Risk-Based Authentication 10Number of Views Deployment Considerations for Risk-Based Authentication 13Number of Views
Trending Articles
Passwordless Authentication in Windows MFA Agent for Active Directory – Quick Setup Guide RSA Authentication Manager Upgrade Process RSA Authentication Manager 8.9 Release Notes (January 2026) An example of SSO using SAML and ADFS with RSA Identity Management and Governance 6.9.x RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide