Authentication Factor
An authentication factor is a category of evidence used to verify identity during an authentication event.
Definition
An authentication factor is a category of evidence presented during authentication. The classic categories are knowledge factors, possession factors, and inherence factors. Some architectures also distinguish location, device posture, or behavioral signals, but these are more often treated as contextual signals rather than standalone factors. The strength of an authentication event depends not only on the number of factors but also on their independence, resistance to compromise, and binding to the legitimate user.
Why it matters
Not all factors are equal, and combining weak factors does not automatically create strong authentication assurance.
The Ariovis perspective
Authentication strength should match the risk of the journey rather than impose the same friction everywhere. Ariovis looks for a balance between security, maintainability and user experience.
Related services
Common pitfalls
- A common misunderstanding is treating low-assurance mechanisms such as email OTP as equivalent to phishing-resistant authenticators.
Standards and protocols
- NIST SP 800-63B
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.