Predefined obligations

Predefined obligations are provided for your use in policy authoring.

An obligation consists of an action that must occur to allow or deny access to a resource.

Register Device

The system registers the device used by the user to access the resource. No user interaction is required for this obligation.

The administrator can configure the following properties to affect device fingerprint registration:

deviceRegistration.allowIncompleteFingerprints

Whether the risk engine registers devices with incomplete device fingerprints.

An incomplete device fingerprint is a device fingerprint that does not include all of the attributes the administrator specifies in the risk profile.

deviceRegistration.permitOnIncompleteFingerprint

Whether the risk engine grants access to request devices with incomplete device fingerprints.

If the administrator does not set the configuration properties, then the properties default to false. When the properties are set to false:

• The risk engine cannot register devices that have incomplete device fingerprints.
• The risk engine denies request devices with incomplete device fingerprints.

Parent topic: Obligations