Advanced use case - Whitelisting users
It is possible to allow some users to bypass the adaptive authentication. There is a built-in functionality in the NevisAdaptAuthState for this use case.
To configure the use case, perform the following steps:
- Create a custom property in nevisIDM. For this, execute the following SQL script on the nevisIDM database:
INSERT INTO TIDMA_PROPERTY (PROPERTY_ID,NAME,TYPE,SCOPE,ENCRYPTED,PROPAGATED,DESCRIPTION,GUI_PRECEDENCE,STR_MAX_LEN,STR_REGEX,ACCESS_CREATE,ACCESS_MODIFY,APPLICATION_ID,CTL_TCN,CTL_CRE_UID,CTL_CRE_DAT,CTL_MOD_UID,CTL_MOD_DAT)
VALUES (121,'bypass_adaptive_authentication',2,7,0,0,'Flag to bypass the adaptive authentication',0,80,'','rw','rw',null,0,'bootstrap',SYSDATE(),'bootstrap',SYSDATE());
- In the nevisAdmin 4 configuration, add the bypass_adaptive_authentication attribute to the nevisIDM Password Login pattern. You do this in the Additional User Attributes field in the pattern's Advanced Settings tab.
- After deployment, go to the nevisIDM Administration UI. Set the attribute bypass_adaptive_authentication to "true" for each user who you want to exclude from the adaptive authentication.