Skip to main content

Behavior Monitoring

Console View​

Behavior Monitoring Console

Behavior Monitoring analyzes user sign-in patterns to detect anomalies that may indicate a compromised account.

Detected Behaviors​

  • New Device: Logging in from a device not seen before.
  • New Location: Logging in from a city or country never visited.
  • Impossible Travel: Sequential logins from geographically distant locations in a time frame that is physically impossible to travel.
  • Velocity: High volume of login attempts in a short period.

Risk Scoring​

Each sign-in attempt is assigned a Risk Score (Low, Medium, High). This score can be used in Sign-on Policies to trigger step-up authentication (MFA) or block the request.