Advanced Authentication Service › Getting Started with Advanced Authentication › Configuring Advanced Authentication › How to Configure Advanced Authentication › Configure CA RiskMinder › Configure Risk Evaluation Rules

Configure Risk Evaluation Rules

Some of the predefined risk evaluation rules have default values. The tenant administrator can specify that these defaults values must be accepted. Alternatively, the tenant administrator can specify the values that they want to set. You set these values to configure the risk evaluation rules.

Follow these steps:

1. Log in to the CA Arcot Administration Console as the Global Administrator.
2. Create the ruleset as follows:
   1. Click Services and Server Configurations, RiskFort, Create Ruleset.

      The Create Ruleset screen opens.

   2. Enter a name for the ruleset in the Name field.
   3. (Optional) If you want to copy the rules configuration from an existing ruleset, select the Copy from an Existing Ruleset check box and then select the name of the ruleset whose configuration you want to copy.
   4. Click Create.

      The ruleset is created.

3. Configure the rules in the ruleset as follows:
   1. Select Services and Server Configurations, RiskFort, Rules and Scoring Management.

      The Rules and Scoring Configuration screen opens.

   2. Select the ruleset from the Select the Rulesets list.

      The Rules and Scoring Management screen opens.

   3. Perform the following steps in the Proposed column for each rule that you want to enable or modify:
      • Ensure that the Enable check box is selected.
      • Set the risk score and the priority.
      • Click the rule name in the Rule Name column.
      • (Optional) Specify values to configure the rule if you do not want to accept the default settings.

        Note: Some of the rules are not configurable.

   4. Set the default risk score for the ruleset in the table that is displayed below the list of rules, and then click Save.
4. Migrate the changes to production by performing the following steps:
   1. Select Services and Server Configurations, Migrate to Production, Migrate to Production.

      The Migrate to Production screen opens.

   2. Select the ruleset from the Select Rulesets list, and then click Migrate.

      The Migrate to Production screen opens.

   3. Click Confirm.

      The request to migrate the updated ruleset to production is sent to RiskMinder Server.

5. Refresh the server cache by performing the following steps:
   1. Select Services and Server Configurations, Administration Console, Refresh Cache.

      The Refresh Cache screen opens.

   2. Select Refresh System Configuration, and then click OK.

      A confirmation message appears.

   3. Click OK.

      A message displaying the request ID for the refresh request appears.

6. Verify that the cache refresh has been carried out by performing the following steps:
   1. Select Services and Server Configurations tab, Administration Console, Check Cache Refresh Status.

      The Search Cache Refresh Request screen opens.

   2. Enter the request ID, and then click Search.

      The View Cache Refresh Request screen opens. Use the information that is displayed on this screen to verify that the cache has been refreshed.

   The risk evaluation rules are configured.