On-demand service security system and method for managing a risk of access as a condition of permitting access to the on-demand service

A method, comprising:

• receiving, with one or more hardware processors, a request to access an on-demand service from a requestor device associated with one of a plurality of entities of the on-demand service;
• evaluating, with the one or more hardware processors, a risk of access corresponding to the request based on stored information associated with at least one of a plurality of users or the one of the plurality of entities by at least determining if the requestor device is a known device by checking a database of known devices, wherein evaluating includes comparing information in the request to access the on-demand service with a list users and entities pre-determined to be granted access to the on-demand service;
• providing, a valid token to the requestor device for an additional authentication sequence;
• providing, with the one or more hardware processors, the additional authentication sequence selected based on whether the requestor device is known, wherein the additional authentication sequence comprises completing additional subsequent authentication communications with the requestor device;
• and
• providing access, with the one or more hardware processors, for the requestor device to the computing entities of the on-demand service in response to successful completion of the additional authentication sequence.

An apparatus, comprising:

• one or more hardware processors coupled with at least one memory device;
• and
• one or more stored sequences of instructions which, when executed by the hardware processor, are configurable to cause the hardware processor to carry out:
• receiving, with the one or more hardware processors, a request to access an on-demand service from a requestor device associated with one of a plurality of entities of the on-demand service;
• evaluating, with the one or more hardware processors, a risk of access corresponding to the request based on stored information associated with at least one of a plurality of users or the one of the plurality of entities by at least determining if the requestor device is a known device by checking a database of known devices, wherein evaluating includes comparing information in the request to access the on-demand service with a list of users and entities pre-determined to be granted access to the on-demand service;
• providing, a valid token to the requestor device for an additional authentication sequence;
• providing, with the one or more hardware processors, the additional authentication sequence selected based on whether the requestor device is known, wherein the additional authentication sequence comprises completing additional subsequent authentication communications with the requestor device;
• and
• providing access, with the one or more hardware processors, for the requestor device to the computing entities of the on-demand service in response to successful completion of the additional authentication sequence.