"As soon as it's a risk, I want to require MFA": How Administrators Configure...
summary
Study has n=28 administrators who configure an Amazon Cognito–style RBA mockup and often pick conservative defaults: for low risk 9 allow and 19 choose some form of MFA, for medium most choose optional MFA, for high 17 require MFA and 10 block. Notifications are enabled by 21 for low risk. Administrators demand exact definitions of low/medium/high and the hidden no risk outcome, complain about unclear terms (what optional MFA actually enforces, block duration), and rely heavily on defaults.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:52Riskbased Authentication
- 1:55Configuration
- 3:40Research Questions
- 4:15Methods
- 5:25Research Question 1
- 7:50Research Question 2
- 11:55Summary
