The risk-based authentication (RBA) message policy defines the message that users see when they are prompted to configure an identity confirmation method. When you duplicate this policy, you create a policy that is identical to the original that you can customize. The new policy is not assigned to a security domain until you manually assign it. You can set the duplicate policy as the default policy.
In the Security Console, click Authentication > Policies > RBA Message Policies > Manage Existing.
Use the search fields to find the policy that you want to duplicate.
Select the policy that you want to duplicate.
From the context menu, click Duplicate.
In the RBA Message Policy Name field, enter a unique name for the policy.