risk based authentication

[Tom Scavo]

On Thu, Feb 18, 2016 at 11:25 AM, Liam Hoekenga <liamr at umich.edu> wrote:
> Is anyone doing risk based authentication with the IdP?  If so, how have you
> implemented it?

FWIW, Google effectively tracks IP address. When I go to a conference
in CA, I'm asked to authenticate with two factors. When I login in MI
on a day-to-day basis (my hometown), I'm not challenged at all. This
is very effective. If my laptop were stolen and shipped out of state,
my Google account (at least) would be unreachable.

Tom