---
title: LexisNexis Dynamic Decision Platform (DDP)
description: Overview of the LexisNexis Dynamic Decision Platform (DDP) authentication nodes for device intelligence and fraud risk assessment in Advanced Identity Cloud journeys.
component: auth-node-ref
version: latest
page_id: auth-node-ref:cloud:lexis-ddp
canonical_url: https://docs.pingidentity.com/auth-node-ref/latest/cloud/lexis-ddp.html
llms_txt: https://docs.pingidentity.com/auth-node-ref/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2026-09-17T14:22:55Z
keywords: ["Nodes & Trees", "Journeys", "Authentication", "LexisNexis DDP", "Device Intelligence"]
page_aliases: ["threat-metrix.adoc"]
section_ids:
  lexis-ddp-example: Example
---

# LexisNexis Dynamic Decision Platform (DDP)

[LexisNexis Dynamic Decision Platform (DDP)](https://risk.lexisnexis.com/products/dynamic-decision-platform) unifies the key components of fraud prevention into a single, holistic risk decision platform. DDP connects multiple data sources and intelligence signals, enabling real-time orchestration of risk decisions. When the nodes are integrated, the risk assessment policy hosted within the DDP returns a risk score mapped to outcomes such as step-up authentication, passing without further friction, or rejecting the transaction.

Advanced Identity Cloud lets you implement risk assessment using these authentication nodes:

* [LexisNexis DDP Profiler node](lexis-ddp-profiler.html)

* [LexisNexis DDP Query node](lexis-ddp-query.html)

* [LexisNexis DDP Review Status node](lexis-ddp-review-status.html)

* [LexisNexis DDP Reason Code node](lexis-ddp-reason-code.html)

* [LexisNexis DDP Update Review node](lexis-ddp-update-review.html)

|   |                                               |
| - | --------------------------------------------- |
|   | These nodes were formerly named ThreatMetrix. |

## Example

The following example shows a typical authentication journey using the LexisNexis DDP nodes for risk assessment:

![Sample LexisNexis DDP risk assessment journey](_images/ddp-risk-assessment-flow.png)

* The journey starts with a Page node to capture username and password.

* Simultaneously, the [LexisNexis DDP Profiler node](lexis-ddp-profiler.html) captures device intelligence information associated with a unique session ID.

* The [Data Store Decision node](../data-store-decision.html) confirms the username-password credentials.

* The [LexisNexis DDP Query node](lexis-ddp-query.html) uses the session ID, along with user personally identifiable information (PII), to make an API call to the DDP for risk assessment:

  * Risk assessment is performed at the DDP to capture suspicious activity.

  * The result of the risk assessment is captured as an API response in the journey.

* The [LexisNexis DDP Review Status node](lexis-ddp-review-status.html) interprets the API risk assessment response:

  * The possible outcomes to continue the journey are `Pass`, `Challenge`, `Review`, or `Reject`.

  * The `Challenge` and `Review` outcomes start a step-up second factor authentication.

  * The node adds truth data to the login event, which enriches the information in the network and enhances fraud detection.

    |   |                                                                                                                                                                                                             |
    | - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
    |   | The example shows initialization of step-up MFA along with an outcome of either pass or fail.A step-up authentication that's initialized but not completed is a sign of potential fraud in the login event. |

The following example shows a one-time passcode (OTP) step-up journey with retrospective truth data through the LexisNexis DDP Update Review node. The journey is called from an inner tree evaluator node in another journey that performs the DDP risk assessment:

![Sample LexisNexis DDP truth data journey](_images/ddp-truth-data-flow.png)

* The [LexisNexis DDP Update Review node](lexis-ddp-update-review.html) uses the `ddp.request_id` value stored in shared state to link retrospective truth data to the risk event API response from the [LexisNexis DDP Query node](lexis-ddp-query.html).

* Truth data improves the fidelity of risk assessments over time.