Context-aware authentication evaluates multiple signals before deciding how much trust to give a login. These typically include:
Device: Is it recognised, managed, and compliant?
Network: Is the connection coming from a trusted network or a suspicious IP?
Location: Does the geographic location match the user’s normal pattern?
Time: Is the login happening during expected working hours?
Behaviour: Does the user’s activity match their established behaviour?
Resource sensitivity: Is the user accessing a routine application or a highly privileged system?
