Use Case Scenario: Event Validation

Involved OneSpan solutions:

• Intelligent Adaptive Authentication

Workflow tree in Access Manager:

• OneSpanEventValidationTree

About this scenario

This scenario simulates an event validation with Intelligent Adaptive Authentication in a single sign-on environment. It combines risk assessment by Intelligent Adaptive Authentication with the ForgeRock concept of session upgrade. When an existing session is upgraded, users will have to provide additional credentials to be granted access to protected data. This means that a logged-in user may need to complete additional authentication steps to access other, more sensitive areas of a website.

In this scenario, the event to be evaluated is switching from the Account Overview tab to the Transactions tab of the logged-in user. The Transactions tab is protected, and Intelligent Adaptive Authentication decides whether the logged-in user is allowed to proceed or further authentication is required.

Before you begin

Before you can begin this scenario, you must have completed Use case scenario: Login or Use case scenario: Login step-up authentication.

Walkthrough: Event validation

To validate an event

• On the MyBank page, switch from the Account Overview to the Transactions tab.

  Intelligent Adaptive Authentication assesses the risk associated with this action. Note that you can switch to the Transactions tab without further authentication.

To view the tree in Access Manager

1. From the ForgeRock Landing Service, open the Access Manager.

2. If required, log in with the credentials that are displayed when hovering over the Access Manager link on the ForgeRock Landing Service.

3. Click Top Level Realm.

4. Select Authentication > Trees from the sidebar menu.

5. Click OneSpanEventValidationTree and view the individual nodes of the workflow.

You can also modify the workflow by adding and connecting tree nodes as needed.

For a list of available OneSpan trees and nodes, see Overview of OneSpan authentication trees and nodes.

Next steps

After completing this scenario, you can continue with Use case scenario: Transaction validation.