Adaptive MFA is Not Triggered

Last Updated: Sep 10, 2025

Overview

When enabling Adaptive MFA, MFA is not triggered.

For example, the user switches location via VPN, which causes the ImpossibleTravel assessor to be evaluated as low.

Applies To

Adaptive MFA

Solution

This is by design. Under default settings, the MFA will not trigger if the confidence score of a single assessor is low and, for example, the other two assessors are high. The overall confidence needs to be low to trigger MFA, and all assessors are taken into account. See How it works for more details.

It is possible to amend the rules. If the default settings do not work for a certain use case, it is possible trigger MFA if the overall confidence score is medium via a post login action.
- See Adaptive MFA template for more details.