Risk-based or adaptive authentication analyzes signals from multiple sources and calculates a risk score for a specific session.

Organizational policies define the action to be taken based on the calculated risk score.