For a user to access a network resource that is protected by risk-based authentication (RBA), you must enable the user for RBA. Use this procedure to enable users for RBA automatically after successful authentication. If you want to enable users for RBA manually, see Enable Users Manually for Risk-Based Authentication.
Users you enable for RBA are counted against the RBA limit in your license.
In the Security Console, click Authentication > Policies > Risk-Based Authentication Policies > Manage Existing.
Click the policy that you want to configure, and select Edit.
Under Enablement and Assurance Settings, do one of the following for Automatic Enablement:
To enable users for RBA automatically after successful authentication, select Allow system to enable users for RBA automatically during authentication.
To disable this feature and permit only manual enablement, clear Allow system to enable users for RBA automatically during authentication.