IDPData source
Identity provider & MFA
The identity provider and MFA service: sign-ins and their context, malicious login attempts, suspicious IPs, token anomalies, compromise flags, MFA factor changes and strength, admin role changes, SSO and passwordless use (17 signals).
Signals from this source
17- Targeted by malicious login attempts IA-T-04 · IA
- Activity from anonymous or suspicious IPs IA-T-05 · IA
- Session token or cookie theft indicators IA-T-06 · IA
- Account flagged compromised by the identity provider IA-T-07 · IA
- Holds admin or privileged roles IA-A-01 · IA
- Removes an MFA factor IA-B-01 · IA
- Shares credentials IA-B-02 · IA
- Exports credentials from a vault IA-B-03 · IA
- Signs in from unusual contexts IA-B-04 · IA
- Approves MFA after repeated prompts IA-B-05 · IA
- Uses SMS as the only MFA factor IA-B-07 · IA
- Enrolls phishing-resistant MFA IA-B-08 · IA
- Uses a password manager IA-B-09 · IA
- Signs in through SSO IA-B-10 · IA
- Adopts passwordless sign-in IA-B-11 · IA
- Attempts to bypass MFA IA-B-13 · IA
- Administers an enterprise AI platform AU-A-01 · AU
Cite this term
"Identity provider & MFA" (IDP), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/sources/identity-provider-and-mfa
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.