MoveThis white paper proposes best practices for customer and enterprise deployments of step-up MFA. It explores a risk based approach that combines dynamic step-up authentication with passive contextual mechanisms, such as geolocation and time of day.
A risk-based approach provides a holistic assessment of users, their computing environment and the nature of the transaction they’re attempting to perform, with the end goal of applying proportionate authentication and authorization