3804028 - Cannot select "Deny" as default action in risk-based authentication until a rule exists - SAP Cloud Identity Services

• When configuring risk-based authentication for an application, the "Deny" option is not available as the default action.
• You can see a message in yellow background: "To use Deny as default action, configure at least one authentication rule first."

• SAP Cloud Identity Services
• Identity Authentication Service

IAS, risk-based authentication, default action deny, deny option missing, rule required, application access control, IP ranges, source IP condition, allow list, blocklist, public cloud access, VPN replacement, access policy, rule order, conditional access , KBA , BC-IAM-IDS , Identity Authentication Service , Problem