Previous Topic: Risk Evaluation RulesNext Topic: How Risk Evaluation Works


User Device Association

After authenticating an end user for the first time, the Advanced Authentication service creates and stores associations of the end user and the device used for that transaction. This is referred to as device binding in risk evaluation terminology. Users who are not bound to a device are more likely to receive the INCREASEAUTH advice at the time of authentication. The Advanced Authentication service also allows users to be bound to more than one device. For example, an end user can use a work and a home computer to access an application. Similarly, a single device can be bound to more than one user. For example, members of a family can use the same computer to access an application.