Device Trust
Device trust is the degree of confidence that a device is known, managed, compliant, and suitable for a given access request.
Definition
Device trust is a contextual authentication concept that reflects how much confidence the organization places in the device used for access. Trust may depend on whether the device is registered, managed, enrolled in endpoint controls, cryptographically bound, compliant with security baselines, or previously associated with legitimate user activity. Device trust is commonly used to reduce friction for low-risk access from known devices and to enforce stronger authentication or restrictions when access originates from unknown, unmanaged, or suspicious devices. In zero trust and modern IAM architectures, device trust is often a major factor in access and authentication policy decisions.
Why it matters
A user identity alone is often insufficient; the trustworthiness of the device can materially affect the risk of granting access.
The Ariovis perspective
Context improves an access decision only when the signals are reliable, understood and governed. Adding more signals does not automatically produce a better policy.
Related services
Common pitfalls
- A common mistake is equating a previously seen device with a trusted device without verifying management, integrity, or ownership assumptions.
Standards and protocols
- NIST SP 800-207
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.