---
title: Creating iovation Device Risk device profiling rules
description: Create a rule to perform iovation Device Risk device profiling on the end-user's system.
component: pingaccess
version: 9.0
page_id: pingaccess:agents_and_integrations:pa_creating_iovation_device_risk_profiling_rules
canonical_url: https://docs.pingidentity.com/pingaccess/9.0/agents_and_integrations/pa_creating_iovation_device_risk_profiling_rules.html
revdate: August 8, 2025
section_ids:
  steps: Steps
---

# Creating iovation Device Risk device profiling rules

Create a rule to perform iovation Device Risk device profiling on the end-user's system.

## Steps

1. In the PingAccess admin console, click **Access**, then go to **Rules > Rules**.

2. Click **[icon: plus, set=fa]Add Rule**.

3. In the **Name** field, enter a unique name for the rule.

   The name can be up to 64 characters long and can include special characters and spaces.

4. In the **Type** list, select **iovation Device Risk device profiling**.

5. In the **Blackbox cookie name prefix** field, enter the prefix of the cookies containing the iovation blackbox captured by this rule.

   The default value is `iovation_bb`.

   Enter the third-party service to use for fraud checks to iovation.

6. In the **iovation URI hook** field, enter the location to load the iovation blackbox collection JavaScript from.

   This value can be a relative or absolute Uniform Resource Locator (URL) *(tooltip: \<div class="paragraph">
   \<p>Identifies a resource according to its internet location.\</p>
   \</div>)* path, but can't be a complete URL containing the scheme and authority. The default value is `/iojs`.

   |   |                                                                                                                                                                                                                                                           |
   | - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | To disable the first-party iovation JavaScript unconditionally, set this value to `<Reserved Application Context Root>/iojs`, where *\<Reserved Application Context Root>* is the context root of the reserved PingAccess application (`/pa` by default). |

7. (Optional) If additional options need to be configured, click **Show Advanced**.

   1. In the **Blackbox time to live (sec.)** field, enter the number of seconds to use the iovation blackbox during a session before refreshing the blackbox device profile.

      The default value is `300`.

   2. (Optional) In the **iovation subkey** field, enter the subkey value supplied to you by iovation.

      |   |                                                                |
      | - | -------------------------------------------------------------- |
      |   | This value is used for debugging and troubleshooting purposes. |

   3. In the **iovation script version** field, enter the version of the iovation Device Recognition JavaScript to use.

      The default value is `general5`.

   4. (Optional) Select the **Overwrite existing blackbox** checkbox to perform blackbox device profiling with every request made to the resources using this rule.

      When deselected, the rule only collects the device profile after the existing blackbox expires. This option isn't selected by default.

8. Click **Save**.