3666355 - Risk-based authentication rules was ignored when using Corp-IdP

• A new group XXX was created in the authentication directory and a risk-based rule was configured for the application to restrict SSO authentication to a subset of users.
• Users in the group XXX can still log on without multi-factor authentication (MFA) being enforced.
• Current configuration:
  • Authentication action is set to two-factor authentication
  • two-factor methods are set to Web authentication
  • the Default Authentication Rule is set to "allow"
  • Corporate IdP was set to the default Identity Provider

Identity Authentication Service

cis rule ignored, multi-factor authentication, mfa, risk-based rule, identity authentication service, ias, sso authentication, group-based authentication, mfa enforcement, authentication configuration, web authentication, default authentication rule, identity federation, tenant configuration , KBA , BC-IAM-IDS , Identity Authentication Service , Problem