Okta Adaptive Multi-Factor Authentication enhances identity verification by dynamically adjusting authentication requirements based on contextual risk factors such as user behavior, device trustworthiness, location, network reputation, and login anomalies. It supports various authentication methods including one-time passwords, biometrics, physical tokens, SMS/voice/email codes, and phishing-resistant options like FIDO2 security keys. The system employs machine learning for risk-based authentication to detect anomalies such as brute-force attacks or compromised credentials, triggering step-up authentication or blocking access when risks are identified. It integrates with cloud applications, on-premises infrastructure, custom apps via APIs/SAML/OIDC/RADIUS protocols, and third-party security tools. The solution enforces granular access policies that adapt to real-time conditions while offering centralized management for diverse user groups across hybrid environments. Features include Okta ThreatInsight for blocking malicious IPs based on global threat data and device assurance checks to restrict unmanaged devices.
