Overview of TruValidate Device Risk
TruValidate Device Risk collects a device profile and other transaction data and uses a series of rules to evaluate the level of security risk for a transaction. The type of transaction is flexible, but in the context of PingFederate, it’s usually a user sign-on event.
Device profile, blackbox, and transaction insight parameters
When a user signs on, TruValidate JavaScript collects hundreds of data elements associated with the device, including the device type, geolocation information, information about the browser, and system settings such as language settings. Together, this data is called the device profile.
The TruValidate JavaScript encrypts the device profile in a package called a blackbox.
In addition to the device profile data, you can take attributes from previous authentication sources and send them to TruValidate as transaction insight parameters.
The TruValidate IdP Adapter sends the blackbox and transaction insight parameters to TruValidate for analysis.
Integration points
Each TruValidate IdP Adapter instance communicates with the TruValidate API through a specific integration point. Each integration point typically represents one type of interaction, such as sign-on or password change.
You can find guidance on integration point design in Planning and Designing Integration Points in the TruValidate Help Center (sign-on required).
Rule sets and business rules
Each integration point is associated with one rule set, which is a collection of business rules and rule groups.
Each business rule has a numeric weight assigned to it. When the conditions of the rule are met by the device profile or transaction data, the weight affects the total risk score for a transaction.
You can find a list of business rule categories in About iovation Device Risk and an example business rule scenario in Business Rule Basics in the TruValidate Help Center (sign-on required).
Risk results
After processing the device profile through the rule set, Device Risk matches the resulting risk score to one of three risk results: allow, review, or deny. The rule set determines the numeric threshold associated with each of the results.
You can find more details about result thresholds in About Rule Weights and Thresholds in the TruValidate Help Center (sign-on required).
The TruValidate API provides the risk result and other data in a response to PingFederate. By including the risk result in your authentication policy, you decide how each of the allow, review, and deny results affects a user’s ability to sign on in your environment.