Systems and methods for uniquely identifying and regularly authenticating users at login

A method for uniquely identifying and regularly authenticating users at login, comprising:

• receiving, by an authentication computer program executed by a backend electronic device and from a workstation computer program executed by a workstation, a user identifier for a user as part of a login attempt;
• communicating, by the authentication computer program, a multifactor authentication request to an authenticator application executed on a user mobile electronic device;
• receiving, by the authentication computer program, a response to the multifactor authentication request from the authenticator application;
• verifying, by the authentication computer program, that the response to the multifactor authentication request matches an expected value;
• saving, by the authentication computer program, user activity data associated with the login attempt;
• calculating, by a user trust computer program executed by the backend electronic device, a user trust score based on the user activity data;
• determining, by the user trust computer program, that the user trust score is below a threshold;
• receiving, by the user trust computer program, an additional authentication factor from the user;
• validating, by the user trust computer program, the additional authentication factor;
• and
• authorizing, by the user trust computer program, the login attempt to the workstation and a user session on the workstation.

A system, comprising:

• a user workstation executing a workstation computer program;
• a user mobile electronic device executing an authenticator application;
• and
• a backend electronic device executing an authentication computer program and a user trust computer program;
• wherein:
• the workstation computer program receives a user identifier for a user as part of a login attempt and provides the user identifier to the authentication computer program;
• the authentication computer program communicates a multifactor authentication request to the authenticator application, the multifactor authentication request comprising a request to receive a machine-readable code from the workstation, a response to a push notification to the user mobile electronic device, a proximity indication between the user mobile electronic device and the workstation, a user biometric, or a user password;
• the authentication computer program receives a response to the multifactor authentication request from the authenticator application;
• the authentication computer program verifies that the response to the multifactor authentication request matches an expected value;
• the authentication computer program saves user activity data associated with the login attempt;
• the user trust computer program calculates user trust score based on the user activity data;
• the user trust computer program determines that the user trust score is above a threshold;
• and
• the user trust computer program authorizes the login attempt to the workstation and a user session on the workstation.