{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition","tabs","tab"]},"redocly_category":"Guides","product":"Identity Management","type":"markdown"},"seo":{"title":"Risk-based login quickstart","description":"Everything about Mosaic Journeys, SDKs, and APIs","siteUrl":"https://developer.transmitsecurity.com/","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"risk-based-login-quickstart","__idx":0},"children":["Risk-based login quickstart"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This guide walks you through building a simplistic authentication flow that adapts based on real-time risk indicators using ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/user/identity_threat_protection"},"children":["Identity Threat Protection"]}," and journeys."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Note"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This guide explains how to implement ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["risk-based login"]}," using ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/journeys_intro"},"children":["Journeys"]}," and Orchestration SDKs."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"how-it-works","__idx":1},"children":["How it works"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["When a user requests to log in to the app, the client invokes the authentication journey (1) and obtains the user credentials (2). After authenticating the user, Mosaic's Identity Threat Protection (3) evaluates the login event and returns a set of discrete risk indicators (4). The risk signals are then evaluated against the rule engine, which maps them to an Allow, Deny, or Custom decision (5). The Risk Level Analysis step branches accordingly, letting you handle each outcome directly in the journey (6)."]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"sequenceDiagram\n participant User\n participant App as Client App\n participant SDK as Orchestration SDK\n participant Mosaic\n\n User-->>App: Request login\n App->>SDK: startJourney()\n SDK-->>Mosaic: Start authentication journey\n Mosaic-->>SDK: Login Form step\n SDK->>App: journeyStepId: LoginForm\n App-->>User: Display login form\n User-->>App: Enter credentials\n App->>SDK: submitClientResponse(\"password\", data)\n SDK-->>Mosaic: Submit credentials\n Mosaic-->>Mosaic: Authenticate user (Password Authentication)\n Mosaic-->>Mosaic: Evaluate risk (Identity Threat Protection)\n Mosaic-->>Mosaic: Evaluate against rules\n\n alt Allow (rule matched)\n Mosaic-->>SDK: Journey complete\n SDK->>App: Success + token\n else Deny (rule matched)\n Mosaic-->>SDK: Journey rejected\n SDK->>App: Rejection\n else Custom (no rule matched)\n Mosaic-->>Mosaic: Evaluate conditions on risk factors\n Mosaic-->>SDK: Journey complete or rejected\n SDK->>App: Success or Rejection\n end\n","diagramHtml":"","diagramHtmlDark":""},"children":["sequenceDiagram\n participant User\n participant App as Client App\n participant SDK as Orchestration SDK\n participant Mosaic\n\n User-->>App: Request login\n App->>SDK: startJourney()\n SDK-->>Mosaic: Start authentication journey\n Mosaic-->>SDK: Login Form step\n SDK->>App: journeyStepId: LoginForm\n App-->>User: Display login form\n User-->>App: Enter credentials\n App->>SDK: submitClientResponse(\"password\", data)\n SDK-->>Mosaic: Submit credentials\n Mosaic-->>Mosaic: Authenticate user (Password Authentication)\n Mosaic-->>Mosaic: Evaluate risk (Identity Threat Protection)\n Mosaic-->>Mosaic: Evaluate against rules\n\n alt Allow (rule matched)\n Mosaic-->>SDK: Journey complete\n SDK->>App: Success + token\n else Deny (rule matched)\n Mosaic-->>SDK: Journey rejected\n SDK->>App: Rejection\n else Custom (no rule matched)\n Mosaic-->>Mosaic: Evaluate conditions on risk factors\n Mosaic-->>SDK: Journey complete or rejected\n SDK->>App: Success or Rejection\n end\n"]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Important"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Identity Threat Protection returns risk indicators. The rule engine maps risk signals to Allow/Deny decisions. If no rule matches, the flow proceeds to the Custom branch where your journey defines how to act on the returned signals."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"before-you-start","__idx":2},"children":["Before you start"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge-wrapper"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge"},"children":["Admin Portal"]}]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["If this is your first time integrating with Mosaic, create an application with OIDC client in the Admin Portal as described ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/user/create_new_application"},"children":["here"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Ensure that ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Identity Threat Protection"]}," is enabled as the risk engine for your tenant. Identity Threat Protection and Fraud Prevention are mutually exclusive—contact your Customer Success Manager to enable the appropriate engine."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-1-configure-rules","__idx":3},"children":["Step 1: Configure rules"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge-wrapper"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge"},"children":["Admin Portal"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Under ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Journey Tools"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Rules"]},", define allow and deny rules that determine risk decision logic:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Allow rules"]},": define trusted entities (e.g., known IP ranges, corporate devices) that should bypass risk-based restrictions."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Deny rules"]},": block access from specific origins or attributes (e.g., TOR exit nodes, flagged devices)."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For example, you can create a rule that denies logins from specific locations and a rule that denies logins from devices you consider risky, such as devices with enabled VPN and TOR."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["When the Risk Level Analysis step evaluates an interaction, it checks the detected risk signals against these rules. Rules are evaluated in order (1-100) and only the first rule to match will apply. If a rule matches, the step branches to the corresponding Allow or Deny branch. If no rule matches, the step proceeds to the Custom branch."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For details on how to create and manage rules, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/risk/rules"},"children":["Enforce rules"]},"."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Note"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Rules are optional. If no rules are defined, all interactions proceed to the Custom branch where you can use Condition steps to evaluate risk factors manually."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-2-build-journey","__idx":4},"children":["Step 2: Build journey"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge-wrapper"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge"},"children":["Admin Portal"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Journeys handle the business logic responsible for this flow. In the Admin Portal, go to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["B2C Identity"]}," or ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["B2B Identity"]}," based on your setup, and open the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Journeys"]}," section. Create a client SDK journey and store its ID. You'll need to implement some client-side code for this journey later."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Note"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You can adapt the journey to match your authentication policy and use case by replacing or adding the authentication steps with the methods you prefer to use."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The example journey collects credentials, authenticates the user using their password, evaluates risk, and then branches based on the rule engine decision. It includes the following steps:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/orchestration/journeys/login_form"},"children":["Login form"]},": Enable password authentication as authentication option and ensure schema collects the user's username (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["loginData1.username"]},") and password (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["loginData1.password"]},")."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/orchestration/journeys/authenticate_password"},"children":["Password Authentication"]},": Configure the step to use submitted user's credentials for authentication."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/orchestration/journeys/risk_level_analysis"},"children":["Risk Level Analysis"]},": Enable evaluation for ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["login"]}," event. The step evaluates risk and branches based on the rule engine outcome:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Allow"]}," (rule-based): A rule matched and allows the interaction—proceeds to the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/orchestration/journeys/complete_journey"},"children":["Complete Journey"]}," step."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Deny"]}," (rule-based): A rule matched and denies the interaction—proceeds to the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/orchestration/journeys/reject_access"},"children":["Reject Access"]}," step."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Custom"]},": No rule matched—use a ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/orchestration/journeys/condition"},"children":["Condition"]}," step to check for specific risk factors (e.g., ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["@std.contains(risk_analysis.risk_result.reasons.IP_RISKY_REPUTATION)"]},") and branch accordingly."]}]}]}]},{"$$mdtype":"Tag","name":"figure","attributes":{"style":{"margin":"0"}},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"/assets/auth_risk_analysis_journey.42a6352589a0d4e892c23f8854169f967cc5ddb0717a6cbd502a4f6b19c02396.2397ab79.png","target":"_blank"},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/auth_risk_analysis_journey.42a6352589a0d4e892c23f8854169f967cc5ddb0717a6cbd502a4f6b19c02396.2397ab79.png","alt":"Risk-based login journey","style":{"maxWidth":"100%"}},"children":[]}]},{"$$mdtype":"Tag","name":"figcaption","attributes":{"style":{"color":"grey","fontStyle":"italic","fontSize":"14px"}},"children":["Click to open the image in a dedicated tab."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-3-add-sdks","__idx":5},"children":["Step 3: Add SDKs"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge-wrapper"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge"},"children":["client"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To run this flow, your integration needs the Orchestration SDK."]},{"$$mdtype":"Tag","name":"Tabs","attributes":{"size":"medium"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"label":"Web","disable":false},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Install and initialize the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/sdk-ref/platform/introduction"},"children":["Platform Web SDK"]},". Make sure to initialize Orchestration with ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["collectRiskData: true"]}," to enable Identity Threat Protection."]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"js","header":{"controls":{"copy":{}}},"source":"import { ido, initialize } from '@transmitsecurity/platform-web-sdk';\n\ninitialize({\n clientId: 'your-client-id',\n ido: {\n serverPath: 'https://api.transmitsecurity.io/ido', // Required: Set serverPath based on your region or custom domain\n collectRiskData: true // Enables Identity Threat Protection\n }\n});\n","lang":"js"},"children":[]}]},{"$$mdtype":"Tag","name":"div","attributes":{"label":"iOS","disable":false},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Install and initialize the Orchestration SDK as described in the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/orchestration/getting-started/quick_start_ios"},"children":["iOS quickstart"]},". Set ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["collectRiskData"]}," to ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["true"]}," during initialization:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"swift","header":{"controls":{"copy":{}}},"source":"do {\n try TSIdo.initialize(clientId: clientId,\n options: .init(serverPath: \"[BASE_URL]\",\n locale: \"[LOCALE]\",\n collectRiskData: true))\n} catch {\n // Handle error\n}\n","lang":"swift"},"children":[]}]},{"$$mdtype":"Tag","name":"div","attributes":{"label":"Android","disable":false},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Install and initialize the Orchestration SDK as described in the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/orchestration/getting-started/quick_start_android"},"children":["Android quickstart"]},". Set ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["collectRiskData"]}," to ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["true"]}," during initialization:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"kotlin","header":{"controls":{"copy":{}}},"source":"val collectRiskData = true\nTSIdo.initializeSDK(\n context,\n clientID,\n TSIdoInitOptions(baseUrl, pollingTimeut, resourceUri, locale, collectRiskData)\n)\n","lang":"kotlin"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Note"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Configure the SDK to work with your region or ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/deployment/custom_domains"},"children":["custom domain"]}," by setting the appropriate ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["serverPath"]}," / ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["baseUrl"]},"."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-4-implement-journey-logic","__idx":6},"children":["Step 4: Implement journey logic"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge-wrapper"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"className":"badge"},"children":["client"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In this step, you implement the client-side code needed to complete a risk-aware authentication journey created in ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#step-3-build-risk-aware-journey"},"children":["Step 3"]},"."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Implementation tips"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You may implement a switch (or other routing mechanism) that invokes a handler responsible for a specific journey step (returned in ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["idoServiceResponse.journeyStepId"]}," parameter). Each handler processes data, displays whatever UI is needed, and calls ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["submitClientResponse()"]}," when the interaction is concluded."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The journey loops back to the switch unless Mosaic signals journey completion by setting the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["journeyStepId"]}," property to ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Rejection.type"]}," or ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Success.type"]},". The ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["idoServiceResponse.token"]}," property contains a JWT token as a proof of journey completion."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["In a nutshell, you'll need to implement:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#1-start-the-journey"},"children":["Starting the journey"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#2-handle-login-form"},"children":["Handling the login form"]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["All steps except the Login Form step in this journey (password authentication, risk evaluation, branching) are handled server-side by Mosaic and do not require any client-side code."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"1-start-the-journey","__idx":7},"children":["1. Start the journey"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Implement a handler that starts the journey by calling ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["startJourney()"]}," with your journey ID."]},{"$$mdtype":"Tag","name":"Tabs","attributes":{"size":"medium"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"label":"Web","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"js","header":{"controls":{"copy":{}}},"source":"const idoResponse = await ido.startJourney('YOUR_JOURNEY_ID');\n","lang":"js"},"children":[]}]},{"$$mdtype":"Tag","name":"div","attributes":{"label":"iOS","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"swift","header":{"controls":{"copy":{}}},"source":"do {\n try TSIdo.startJourney(journeyId: \"YOUR_JOURNEY_ID\")\n} catch {\n debugPrint(\"[DEBUG] Failed to start journey: \\(error)\")\n}\n","lang":"swift"},"children":[]}]},{"$$mdtype":"Tag","name":"div","attributes":{"label":"Android","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"kotlin","header":{"controls":{"copy":{}}},"source":"TSIdo.startJourney(\n \"YOUR_JOURNEY_ID\",\n TSIdoStartJourneyOptions(),\n callback\n)\n","lang":"kotlin"},"children":[]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"2-handle-login-form","__idx":8},"children":["2. Handle login form"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The only client-facing step in this journey is the ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/guides/orchestration/journeys/login_form"},"children":["Login Form"]}," step, which requests the user's username and password. Your client should present a login form and submit the collected credentials back to the journey using ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["\"password\""]}," as the branch ID."]},{"$$mdtype":"Tag","name":"Tabs","attributes":{"size":"medium"},"children":[{"$$mdtype":"Tag","name":"div","attributes":{"label":"Web","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"js","header":{"controls":{"copy":{}}},"source":"function handleLoginForm(idoResponse) {\n const form = document.querySelector('#loginForm');\n const formData = new FormData(form);\n const data = Object.fromEntries(formData.entries());\n\n ido.submitClientResponse(\"password\", data);\n}\n","lang":"js"},"children":[]}]},{"$$mdtype":"Tag","name":"div","attributes":{"label":"iOS","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"swift","header":{"controls":{"copy":{}}},"source":"let data = [\n \"username\": collectedUsername,\n \"password\": collectedPassword\n]\ndo {\n try TSIdo.submitClientResponse(\n clientResponseOptionId: \"password\",\n data: data\n )\n} catch {\n debugPrint(\"[DEBUG] Failed to submit form data: \\(error)\")\n}\n","lang":"swift"},"children":[]}]},{"$$mdtype":"Tag","name":"div","attributes":{"label":"Android","disable":false},"children":[{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"kotlin","header":{"controls":{"copy":{}}},"source":"data class LoginData(val username: String, val password: String)\n\nval responseData = LoginData(collectedUsername, collectedPassword)\nTSIdo.submitClientResponse(\n \"password\",\n responseData,\n callback\n)\n","lang":"kotlin"},"children":[]}]}]}]},"headings":[{"value":"Risk-based login quickstart","id":"risk-based-login-quickstart","depth":1},{"value":"How it works","id":"how-it-works","depth":2},{"value":"Before you start","id":"before-you-start","depth":2},{"value":"Step 1: Configure rules","id":"step-1-configure-rules","depth":2},{"value":"Step 2: Build journey","id":"step-2-build-journey","depth":2},{"value":"Step 3: Add SDKs","id":"step-3-add-sdks","depth":2},{"value":"Step 4: Implement journey logic","id":"step-4-implement-journey-logic","depth":2},{"value":"1. Start the journey","id":"1-start-the-journey","depth":3},{"value":"2. Handle login form","id":"2-handle-login-form","depth":3}],"frontmatter":{"markdown":{"toc":{"depth":2}},"seo":{"title":"Risk-based login quickstart"}},"lastModified":"2026-05-25T14:44:32.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/user/auth_risk_based","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}