Thales banner

Context-based and step-up authentication solutions

Context-based authentication

Thales' context-based authentication offers convenient, frictionless strong authentication while maintaining the flexibility and agility to add protection with stronger methods of security in higher risk situations.

Combined with 'step-up' authentication, context-based authentication optimises a layered approach to access security by assessing user login attributes and matching them against pre-defined security policies. When security policies are met, users are granted immediate access. When security policies are not met, users are asked to step up security by providing an additional authentication factor, eliminating the risk of unauthorised access.

A step-up second factor could be a PKI token or a one-time passcode received via SMS text message, or generated on a mobile device or hardware token, depending on organisational policies.

ami cta

Your organisation is a target for cyber attacks

Discover how you can protect with access management security.

How step-up authentication works

Thales' SafeNet Access Management and Authentication Solutions leverage configurable, white-box policy rules to enable granular control over the level of authentication required each time a user logs in to an online resource.

The context engine analyses a user’s logon attributes based on a set of configurable parameters – including geographical location, IP address, time of day, and device recognition – and generates a context assurance level. If a security policy is met, users are granted access. If a security policy is not met, the user may be asked to step up security by providing an additional authentication factor.

Context-based authentication is currently supported by SafeNet Trusted Access.

context-based-authentication-flow

 

"We’re beginning the switch to broad use of multi-factor authentication as an important new safeguard for our employees and our enterprise. Security attacks are unrelenting, and we view MFA as a vital and necessary addition to VUMC’s enterprise cybersecurity program."

- Andrew Hutchinson, Executive Director of Enterprise Cybersecurity, VUMC

Read the case study

test

What is cloud access management?

How does it work?

Context-based & step-up authentication products

SafeNet Trusted Access

SafeNet Trusted Access offers identity-as-a-service, combining the convenience of cloud single sign-on with granular access security. By validating identities, enforcing access policies and applying cloud SSO, organisations can ensure secure, convenient access to numerous cloud applications from one easy-to-navigate console.

Learn more about SafeNet Trusted Access


SafeNet MobilePASS+ out-of-band push authentication

Offering frictionless strong authentication to hundreds of applications, including SaaS and VPNs, push authentication on mobile devices lets users authenticate with a single tap of a finger on their mobile device.

Learn more about SafeNet MobilePASS+ out-of-band push authentication


GrIDsure authentication

GrIDsure authentication is a convenient pattern-based authentication solution that overcomes the weakness of passwords without the need for software to be installed or hardware to be provisioned.

Learn more about GrIDsure authentication

Cloud-based Access Management - SafeNet Trusted Access

Cloud-based Access Management - SafeNet Trusted Access - Product Brief

Cloud-based applications play a vital role in fulfilling productivity, operational and infrastructure needs in the enterprise. However, the burden of managing users’ multiple cloud identities grows as more cloud apps are used. Each new service added to an organizations’ cloud...

SafeNet MobilePASS+ Mobile Authenticator App - Push and OTP

SafeNet MobilePASS+ Mobile Authenticator App - Push and OTP - Product Brief

End users and IT teams are experiencing waves of high stress due to the pandemic and escalating cyberattacks. Thales offers a simple and highly secure authenticator app that makes login fast and secure throughout each login session, lowering risk and ensuring secure remote...

Thales GrIDsure Authentication

Thales GrIDsure Authentication - Product Brief

Providing unparalleled convenience to end users and simple deployment to IT staff, Thales GrIDsure Authentication is Providing unparalleled convenience to end users and simple deployment to IT staff, Thales GrIDsure Authentication is a pattern-based authentication solution...