Question Re: SAP IdP per application force 2FA in Technology Q&A

SAP IdP per application force 2FA

roderick_oliver — Tue, 06 Jun 2023 08:49:18 GMT

In SAP IdP, is it possible to enforce 2FA on a per application basis or is this only set per tenant for all applications?

Re: SAP IdP per application force 2FA

George_Yu1 — Tue, 06 Jun 2023 13:15:52 GMT

Hi Roderick,

Since all apps are authenticated from the same IAS, the same policy applies. So it is the later.

Regards,

George

Re: SAP IdP per application force 2FA

roderick_oliver — Wed, 07 Jun 2023 05:15:11 GMT

I should have spent a bit more time exploring the tenant interface. Since posting the question I found my answer.

For tenant-wide enforcing of 2FA, there is a setting under "Risk-Based Authentication/Tenant Settings/Risk-Based Authentication". Here either a rule to require 2FA can be set, either a default or based on client conditions.

The same menu option is available under the "Authentication and Access" for the individual application and setting this here changes the scope to that of the application.

Re: SAP IdP per application force 2FA

istvanbokor — Fri, 16 Jun 2023 12:35:54 GMT

Hi,

On IAS it is possible to set it on application level: Configure Risk-Based Authentication for an Application

Or on the whole tenant level: Configure Default Risk-Based Authentication for All Applications in the Tenant

Kind regards,
István