1 min lesson
Combine signals: no single one is enough
Match each case in "Combine signals: no single one is enough" to the signal and response that fit it.
Step 1 of 2
Combine signals: no single one is enoughidentity AND device AND context
A stolen password alone shouldn't open anything. The access decision is a function of several independent signals and the strong design fuses them rather than leaning on one.
Phishing-resistant MFA: passkeys/WebAuthn or hardware keys, never SMS.
SSOSingle Sign-On. One company login (usually via SAML or OIDC) instead of a separate password per tool. Press Enter for the full definition. through the IdP so every app inherits the same auth.
Risk-based step-up when the signal looks off.
Is this a managed, compliant device? MDM attests it.
Disk encryption on, OS patched, EDR running, not jailbroken.
An unmanaged laptop gets limited or no access, even with valid creds.
Location, time, impossible-travel, anomalous volume.
Sensitivity of the resource being requested.
Feeds a risk score that can demand step-up or deny.