Authentication Factor

auth_factor

An Authentication Factor object describes a category of methods used for identity verification in an authentication attempt.

Attributes

CaptionNameTypeDescription
DevicedeviceDevice[]

Group:primary
Device used to complete an authentication request.

Email Addressemail_addrEmail Address

Entity:EMAIL_ADDRESS
Group:context
The email address used in an email-based authentication factor.

Factor Typefactor_typeString

Group:primary
The type of authentication factor used in an authentication attempt.

Factor Type IDfactor_type_idInteger

Group:primary
The normalized identifier for the authentication factor.

  • 0: Unknown (UNKNOWN)
  • 1: SMS (SMS)
  • 10: WebAuthn (WEBAUTHN)
  • 11: Password (PASSWORD)
  • 2: Security Question (SECURITY_QUESTION)
  • 3: Phone Call (PHONE_CALL)
  • 4: Biometric (BIOMETRIC)
  • 5: Push Notification (PUSH_NOTIFICATION)
  • 6: Hardware Token (HARDWARE_TOKEN)
  • 7: OTP (OTP)
  • 8: Email (EMAIL)
  • 9: U2F (U2F)
  • 99: Other (OTHER)
HMAC-based One-time Password (HOTP)is_hotpBoolean

Group:context
Whether the authentication factor is an HMAC-based One-time Password (HOTP).

Time-based One-time Password (TOTP)is_totpBoolean

Group:context
Whether the authentication factor is a Time-based One-time Password (TOTP).

Phone Numberphone_numberString

Group:context
The phone number used for a telephony-based authentication request.

ProviderproviderString

Group:context
The name of provider for an authentication factor.

Raw Dataraw_dataJSON

Group:context
The event data as received from the event source.

Record IDrecord_idString

Group:primary
Unique identifier for the object

Security Questionssecurity_questionsString[]

Group:context
The question(s) provided to user for a question-based authentication factor.

UnmappedunmappedUnmapped[]

Data from the source that was not mapped into the schema.

Relationships

Authentication Factor shown in context

Inbound Relationships

These objects and events reference Authentication Factor in their attributes:

Outbound Relationships

Authentication Factor references the following objects and events in its attributes:

This page describes ocsf-1.4.0