SAP IdP per application force 2FA

[roderick_oliver]

In SAP IdP, is it possible to enforce 2FA on a per application basis or is this only set per tenant for all applications?

[istvanbokor · Accepted solution]

Hi,

On IAS it is possible to set it on application level: Configure Risk-Based Authentication for an Application

Or on the whole tenant level: Configure Default Risk-Based Authentication for All Applications in the Tenant

Kind regards,
István

[roderick_oliver]

I should have spent a bit more time exploring the tenant interface. Since posting the question I found my answer.

For tenant-wide enforcing of 2FA, there is a setting under "Risk-Based Authentication/Tenant Settings/Risk-Based Authentication". Here either a rule to require 2FA can be set, either a default or based on client conditions.

The same menu option is available under the "Authentication and Access" for the individual application and setting this here changes the scope to that of the application.

[George_Yu]

Hi Roderick,

Since all apps are authenticated from the same IAS, the same policy applies. So it is the later.

Regards,

George