OneLogin SmartFactor
Authentication
Prevent cyber attacks with context-aware adaptive authentication

Overview

Key benefits

With cyber attacks on the rise, it’s more important than• Combat phishing and account compromise

ever to defend against phishing and account compromise.

- Intelligent MFA requires users with high-risk

The Verizon 2022 Data Breach Investigations Reportlogin attempts to use other factors, such as theindicated that nearly 50% of breaches involve the use of

OneLogin OTP mobile app, SMS, or voice, as anstolen credentials¹. Although Multi-Factor Authentication

additional layer of security.

(MFA) has emerged as a common tool to protect user
credentials and sensitive company data, traditional• Enable device-anywhere access - Enforce
authentication policies across corporate-owned

solutions create annoyances for end-users andor “bring your own” devices –all of which havenegatively impact productivity.

different operating systems and, therefore,

OneLogin SmartFactor AuthenticationTM
SmartFactor Authentication uses risk insights fromOne Identity’s OneLogin Vigilance AITM to automaticallyconfigure login flows and determine whether to prompt
users for MFA, balancing security with usability. Loginvarying security vulnerabilities. Protect remoteworkers and “road warriors” whose userbehavior may change on a daily basis.
• Gain visibility into new login attempts Provide not only security and convenience,but also a compliance and reporting benefit byattempts with elevated risk scores are required to provide

streamlining login events in real time to SIEM

additional authentication factors or denied accessand other cloud communication tools to meetentirely, while lower risk logins are prompted with fewer

audit requirements.

requirements or bypass MFA altogether.

“• Improve the user experience forlow-risk users - For users that exhibit minimalor zero risk factors, OneLogin can eliminate theSecurity is incredibly importantfor us here at Virgin Hyperloop
One and OneLogin made us very
comfortable with securing all ofour intellectual property. We use
it on all of our applications.
Dawn Armstrong, Director of IT
Virgin Hyperloop One

1 Verizon Data Breach Investigations Report, May 2022, Verizon”

requirement for an additional factor or bypass
MFA to improve convenience when security
confidence is high.
• Extend the value of your existing MFA The OneLogin solution integrates with othermultifactor authentication providers so you
can layer SmartFactor Authentication for evenstronger MFA.
• Supported MFA providers include:• Yubico• RSA• Duo Security••

Symantec
Google AuthenticatorHow does SmartFactor Authentication work?
SmartFactor Authentication uses insights from the Vigilance AI risk engine to analyze a broad range of inputs, such as
location, device, and user behavior, to calculate a risk score and determine the most appropriate security action to take foreach login attempt.

WHO: IDENTITY
Specific users,
groups, roles.

SMS

CERT

Security
Question

Skippable
MFAPushOneLogin
Protect

Biometrics
WebAuthn

Email MFA

Voice MFA

WHERE: LOCATION
Specific geographiczone, IP address.

HOW: DEVICE TYPE
Desktops, mobile
devices, OS.

Multi-Factor
Authentication

VIGILANCEAIV SCORE

WHAT: TARGET APPSpecific browser or
device apps.

Deny Access

WHEN: TIME OF DAYWork week, weekends,
holidays.

OneLogin Functionality Includes:
Vigilance AITM
Threat Engine

OneLogin’s proprietary risk engine uses machine learning to understand typical accesspatterns and dynamically enforce additional or fewer authentication requirements based onreal-time risk scoring. Behavioral inputs include network & IP reputation, device fingerprinting,time anomalies, and known malicious activities used to hide identity (e.g. Tor browsers).

Smart Flows

Select the appropriate login flow for different sets of users based on standard, brute-force,or passwordless needs. Provide a secure, robust login experience that utilizes biometrics formobile applications.

Smart MFA

Adjust MFA based on risk threshold to simplify login for low-risk attempts and step-up
authentication for high-risk ones. Reduce support calls and the costs associated withtransactional MFA (e.g. SMS, voice).

Smart AccessRestrict access based on location of user or if they have exhibited an unusual pattern of
behavior for reduced threat exposure.

SMS
Authentication

Instead of contacting the IT helpdesk, users can use a one-time password sent to their phone
via SMS to authenticate and reset their own password via OneLogin’s intuitive web interface.

Voice MFA

As an alternative to SMS or email, voice MFA allows users to receive a phone call to theirmobile phone voice MFA or landline, verifying their identity to the OneLogin Portal.

Compromised
Credential Check

Protect from password reuse attacks and automatically detect credentials that arecompromised by a third-party data breach during password change and password reset.

Third-PartyIntegrations

OneLogin works with your existing third-party authentication provider to prompt users withhigh risk login attempts to submit additional factors. Stream events in real-time directlyto SIEM or integrate with your existing CASB solution for User & Entity Behavior Analytics(UEBA) capabilities.

To learn more about OneLogin’s SmartFactor Authentication, visit https://www.onelogin.com/product/smartfactor-authentication© 2022 One Identity LLC ALL RIGHTS RESERVED. One Identity, and the One Identity logo are trademarks and registered trademarks of One Identity LLC in the U.S.A. and other countries. For a complete list of One Identity trademarks,
please visit our website at www.oneidentity.com/legal. All other trademarks, servicemarks, registered trademarks, andregistered servicemarks are the property of their respective owners. Datasheet-MSP-LP-76008