Adaptive selection of authentication schemes in MFA

A non-transitory computer-readable storage medium comprising computer-executable instructions carried on the computer-readable storage medium, the instructions readable by a processor and, when read and executed, configured to cause the processor to:

• receive a request from a user to access a resource of a network;
• determine whether the resource is protected;
• in response to determining that the resource is protected, generate, based on evaluation of a plurality of resource parameters, a dynamic authentication chain comprising a plurality of authentication schemes arranged in a particular order;
• wherein the plurality of authentication schemes and the particular order are dynamically selected as the dynamic authentication chain is being generated;
• challenge the user with the dynamic authentication chain in a single login request;
• receive a set of credentials from the user based at least in part on the particular order of the dynamic authentication chain in response to the login request;
• determine whether the set of credentials satisfies the dynamic authentication chain;
• authenticate the user in response to determining that the set of credentials satisfies the dynamic authentication chain;
• adapt to re-challenge the user with a stronger authentication scheme when a highly protected resource is being accessed;
• and
• analyze criteria for failure and re-challenge the user in response to determination that the set of credentials fails to satisfy the dynamic authentication chain.

A computer system comprising:

• a server comprising a hardware processor configured to:
• receive a request from a user to access a resource of a network;
• determine whether the resource is protected;
• in response to determining that the resource is protected, generate, based on evaluation of a plurality of resource parameters, a dynamic authentication chain comprising a plurality of authentication schemes arranged in a particular order;
• wherein the plurality of authentication schemes and the particular order are dynamically selected as the dynamic authentication chain is being generated;
• challenge the user with the dynamic authentication chain in a single login request;
• receive a set of credentials from the user based at least in part on the order of the dynamic authentication chain in response to the single login request;
• determine whether the set of credentials satisfies the dynamic authentication chain;
• authenticate the user in response to determining that the set of credentials satisfies the dynamic authentication chain;
• adapt to re-challenge the user with a stronger authentication scheme when a highly protected resource is being accessed;
• and
• analyze criteria for failure and re-challenge the user in response to determining that the set of credentials fails to satisfy the dynamic authentication chain.