Continuous authentication

If nevisAdapt is integrated into nevisDetect as a risk plug-in, nevisAdapt calculates the risk score for every request to be able to provide continuous authentication.

To maintain a high performance, the risk scores are cached in the nevisAdapt plug-in. If the plug-in observes the same context data within the same session, it can return the risk score results without having to call the nevisAdapt service again.

If you observe request context data only once per session, you can disable the caching of the HTTP requests in the configuration.

The following sequence diagram shows the interaction between the nevisAdapt risk plug-in and the nevisAdapt service. The interaction consists of the following parts:

• The nevisAdapt risk plug-in calls the nevisAdapt service to calculate the risk score.
• The nevisAdapt risk plug-in caches the response of the nevisAdapt service.
• Throughout the session: the nevisAdapt risk plug-in checks for the cache entry and updates it.
• On session termination: the nevisAdapt risk plug-in collects all information and calls the nevisAdapt service to update the database.