Predefined obligations are provided for your use in policy
authoring.
An obligation consists of an action that must occur to
allow or deny access to a resource.
- Register Device
- The system registers the device that is used by the user to access
the resource. No user interaction is required for this obligation.
- The administrator can configure the following properties to affect
device fingerprint registration:
deviceRegistration.allowIncompleteFingerprints- Specifies whether the risk engine registers devices with incomplete
device fingerprints.
- An incomplete device fingerprint is a device fingerprint
that does not include all of the attributes that the administrator
specifies in the risk profile.
deviceRegistration.permitOnIncompleteFingerprint- Specifies whether the risk engine grants access to request devices
with incomplete device fingerprints.
If the administrator does not set the configuration
properties, then the properties default to false.
When the properties are set to false:
- The risk engine cannot register devices that have incomplete device
fingerprints.
- The risk engine denies request devices with incomplete device
fingerprints.