authentication policy tree

security

PingFederate's runtime decision tree for authentication: nodes are authentication sources and selectors, Fail and Success branches express fallbacks, reusable fragments capture common sequences, and every successful path ends by fulfilling a policy contract.

One tree routes different populations differently - corporate network tries Kerberos and falls back to the form, sensitive applications add a second factor.

Also known as: policy tree, policy trees

← All glossary entries