Using the OAuth2 framework, you can integrate NetIQ Advanced Authentication with Privileged Access Manager to use multi-factor authentication and utilize Risk Service capabilities. Advanced Authentication delivers various authentication mechanisms that enable identity assurance in addition to typical username and password-based authentication. Risk Service evaluates the contextual information associated with an access attempt, detects unknown risks, and takes necessary action based on the defined rules.
The Risk Service allows you to accomplish the following:
Prevent fraudulent access to a web application or network and improve its security.
Determine the level of risk based on several criteria and user behavior patterns (for example, browser type, time of login).
Enhance the user experience. Users are only required to give additional information for authentication when the associated risk is high.
The Risk Service also facilitates in detecting different malicious activities listed in Integrating with ArcSight Intelligence.
To integrate Privilege Account Manager with Advanced Authentication, perform the following tasks:
Ensure that Advanced Authentication 6.3.5.1 and later versions with the supported version of Risk Service are installed and configured.
For information about how to install Advanced Authentication, see Advanced Authentication Server Installation and Upgrade Guide.
For information about how to configure Advanced Authentication, see Advanced Authentication Administration Guide.