Overview#

Graded Authentication is a Trust Elevation mechanism that determines Access Control by the Authentication Methods used by the Trustee

Graded Authentication Example#

When a userId comes in from a VPN we might require Multi-Factor Authentication for them to access Personally Identifiable Information. Where if they were on the local network or only accessing Public data, we would not.

For these more highly Protected Resources we might want to add Multi-Factor Authentication

Microsoft Active Directory and Graded Authentication[1]#

Authentication Mechanism Assurance was implemented in Windows Server 2008 R2.

More Information#

There might be more information for this subject on one of the following:

• Graded Authentication Management Service
• IDSA Integration Framework
• Single Sign-On

---

• [#1] - Authentication Mechanism Assurance for AD DS in Windows Server 2008 R2 Step-by-Step Guide - based on information obtained 2017-04-19-