Security

Authentication Fallback

Authentication fallback is a secondary login method kept available alongside a primary one such as SSO. If it does not enforce the same policy, it can give attackers a route around MFA.

Deep dive

Learn Article

Why SAML MFA Fails When Other VPN Login Paths Remain

SAML MFA only protects logins that reach the identity provider. Other VPN login paths need an owner, a reason and an expiry date, or they should go.

intermediate 5 min read

Back to glossary