I am look for documentation that explains the Adaptive Authentication 7.1.0.6 Back office Admin console configuration. For Authentication Methods, Secret Questions, Question - Acceptable Match Score. What explains the score values and the fuzzy logic behind it.
Hello Teresa,
To help prevent user lockout due to mistyped answers, RSA Adaptive Authentication (On-Premise) provides a set of fuzzy logic comparators. Fuzzy logic can help catch 10–15 percent of user typos, which helps prevent lockouts and unnecessary customer support calls. The fuzzy logic comparators are located in the c-config-challenge.xml file in the AdaptiveAuthentication\WEB-INF\classes\configs\ directory. You should set these comparators at the same time as the challenge questions.
For each question, you can add a list of fuzzy logic comparators You can use multiple comparators for different types of answers.
For example:
<property name="comparators">
<list>
<ref bean="TypoDistance1_4"/>
<ref bean="TypoDistance2_6"/>
</list>
</property>
Each type of comparator returns a fuzzy logic score between 0 and 100. The highest score returned by the number of configured comparator is compared with the configured value in BackOffice -> Administration -> Authentication Methods -> Question - Acceptable Match Score.
Configuring this value to 100 is the highest score that the provided answer is more accurate and 0 is the less accurate.
For more information please refer RSA Adaptive Authentication (on Premise) 7.3 Operations Guide in the section Fuzzy Logic Comparators for Challenge Questions on page 42.
Please let us know if you have any further questions.
Thanks,
Jasmine