3720638 - How-to set up RBA rules for both device and country change while excluding certain API Keys?

• Two-Factor Authentication (TFA) is not triggered despite setting up the RBA rule when logging in via a private/incognito browser within the scoped site.
• When the "AND" condition is set, TFA does not trigger unless both device and country change criteria are met during login.
• When the "OR" condition is set, the TFA verification screen is displayed repeatedly due to the "apikey" condition.

• Customer Data Cloud
• Privacy & Safety (Consent, RBA - Risk-Based Authentication)

rba rule, tfa issue, two-factor authentication, private browser, incognito mode, device change, country change, api key condition, repeated tfa screen, risk-based authentication, authentication rule configuration, tfa not triggered, rba troubleshooting. , KBA , CEC-PRO-PNS , Privacy & Safety (Consent, RBA - Risk-Based Authentication) , How To