Name: Configuring Account Takeover Protection in SAP Customer Data Cloud
Uploaded: 2024-2-19
Duration: 243 s
Description: In this video, you’ll get an overview of Account Takeover Protection that will be configured in the SAP Customer Data Cloud Console.If you would like more information, see the RBA and Account Takeover Protection page on the SAP Help Portal.

Share feedback

<p>Planned maintenance of Practice Systems</p>

Planned maintenance of Practice Systems

Why create an SAP account?

Enhance your learning experience

SAP Learning

Subscribe now

Learn more

Live Sessions

Hands-on Practice

Certification

My Learning

Ready to start learning?

<div><div><div><div>In this video, you’ll get an overview of Account Takeover Protection that will be configured in the SAP Customer Data Cloud Console.<br><br>If you would like more information, see the <a href="https://help.sap.com/docs/SAP_CUSTOMER_DATA_CLOUD/8b8d6fffe113457094a17701f63e3d6a/a901b231b8784342a1ed1f7385d4ef4e.html?q=ato" rel="nofollow noopener noreferrer" target="_blank">RBA and Account Takeover Protection</a> page on the SAP Help Portal.<br></div></div></div></div>

Configuring Account Takeover Protection in SAP Customer Data Cloud

Welcome! In this video,  you’ll learn about Account Takeover Protection.  Account Takeover Protection  is a recommended risk engine powered by AI.  Account Takeover Protection provides  an additional risk score  that can trigger RBA security rules,  providing an additional level of account security.  ATO Protection provides:  Enhanced security:  AI/ML and built-in security measures  reduce the risk of data hacks  and unauthorized access.  Adaptive authentication:  Providing a frictionless experience  for legitimate users  while adding deterrents for malicious actors.  Location-based risk awareness:  The system identifies high-risk attack locations  for targeted security measures.  Swift detection and resolution:  Attacks are quickly detected and resolved,  minimizing potential damage. AI-driven account takeover protection  enhances security measures  through advanced user behavior analysis, anomaly detection, risk-based authentication,  and automated response, improving the detection and prevention of account takeover attempts.  On this slide, we can see how beneficial AI-driven ATO protection is. The process of account takeover protection  before AI relied on manual analysis  and reactive measures,  resulting in slower detection and response times  to unauthorized access attempts.  With AI, we only need step 1  to implement intelligent security measures,  and AI automatically does the rest.  Let’s see this in action. In the SAP Customer Data Cloud console.   Under the Identity menu,  choose the Security item to manage  and customize security settings,  ensuring the protection of sensitive data.  Choose the Risk-Based Authentication tab.   Enable ATO Risk Scoring.   We incorporate risk scores from the ATO engine  by enabling the Account Takeover (ATO) risk scoring feature.  Let’s configure a rule to trigger Account Protection when the Account Takeover (ATO)  risk score reaches a high level,  providing an additional layer  of security to protect user accounts.  Choose Create New Rule.  Now, we will define a Rule.  Choose On high-risk score > Account lockout  and choose Next.  Enter Lock account  on the high-risk score as a Rule Name.   Choose the Password Login option on the right-hand side.   Choose Next.  Let’s choose On high risk score >= 0.5  on the left-hand side.  Leave the default value for Lock Account  for 600 seconds on the right-hand side.   Choose Next.  Now, let’s navigate to your website  and try to login multiple times  with an incorrect password.  Due to multiple failed login attempts,  the ATO AI engine detects a high-risk situation  and locks the account temporarily.  Navigate back to the console.  On the security dashboard page,  you will see the allowed and blocked login attempts and that the login risk score is 0.84,  which is higher than the threshold value we gave to the RBA rule.  Scroll down to find the Top High-Risk IPs card  to see the suspicious IPs detected by the ATO engine. Thank you for watching!