Skip to content

Class: AuthFactor

An Authentication Factor object describes a category of methods used for

identity verification in an authentication attempt.

URI: ocsf:AuthFactor

 classDiagram
    class AuthFactor
    click AuthFactor href "../AuthFactor/"
      Object <|-- AuthFactor
        click Object href "../Object/"

      AuthFactor : device





        AuthFactor --> "0..1 _recommended_" Device : device
        click Device href "../Device/"



      AuthFactor : email_addr

      AuthFactor : factor_type

      AuthFactor : factor_type_id





        AuthFactor --> "1" FactorTypeIdEnum : factor_type_id
        click FactorTypeIdEnum href "../FactorTypeIdEnum/"



      AuthFactor : is_hotp

      AuthFactor : is_totp

      AuthFactor : phone_number

      AuthFactor : provider

      AuthFactor : security_questions

Inheritance

Slots

Name Cardinality and Range Description Inheritance
device 0..1 recommended
Device		 Device used to complete an authentication request direct
email_addr 0..1
EmailT		 The email address used in an email-based authentication factor direct
factor_type 0..1 recommended
String		 The type of authentication factor used in an authentication attempt direct
factor_type_id 1
FactorTypeIdEnum		 The normalized identifier for the authentication factor direct
is_hotp 0..1 recommended
Boolean		 Whether the authentication factor is an HMAC-based One-time Password (HOTP) direct
is_totp 0..1 recommended
Boolean		 Whether the authentication factor is a Time-based One-time Password (TOTP) direct
phone_number 0..1
String		 The phone number used for a telephony-based authentication request direct
provider 0..1 recommended
String		 The name of provider for an authentication factor direct
security_questions *
String		 The question(s) provided to user for a question-based authentication factor direct

Usages

used by used in type used
Idp auth_factors range AuthFactor
AccountChange auth_factors range AuthFactor
Authentication auth_factors range AuthFactor

In Subsets

Aliases

  • Authentication Factor

Identifier and Mapping Information

Schema Source

Mappings

Mapping Type Mapped Value
self ocsf:AuthFactor
native ocsf:AuthFactor

LinkML Source

Direct

name: AuthFactor
description: 'An Authentication Factor object describes a category of methods used
  for

  identity verification in an authentication attempt.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Authentication Factor
is_a: Object
slots:
- device
- email_addr
- factor_type
- factor_type_id
- is_hotp
- is_totp
- phone_number
- provider
- security_questions
slot_usage:
  device:
    name: device
    annotations:
      group:
        tag: group
        value: primary
    description: Device used to complete an authentication request.
    recommended: true
  email_addr:
    name: email_addr
    annotations:
      group:
        tag: group
        value: context
    description: The email address used in an email-based authentication factor.
  factor_type:
    name: factor_type
    annotations:
      group:
        tag: group
        value: primary
    recommended: true
  factor_type_id:
    name: factor_type_id
    annotations:
      group:
        tag: group
        value: primary
    required: true
  is_hotp:
    name: is_hotp
    annotations:
      group:
        tag: group
        value: context
    recommended: true
  is_totp:
    name: is_totp
    annotations:
      group:
        tag: group
        value: context
    recommended: true
  phone_number:
    name: phone_number
    annotations:
      group:
        tag: group
        value: context
    description: The phone number used for a telephony-based authentication request.
  provider:
    name: provider
    annotations:
      group:
        tag: group
        value: context
    description: The name of provider for an authentication factor.
    recommended: true
  security_questions:
    name: security_questions
    annotations:
      group:
        tag: group
        value: context

Induced

name: AuthFactor
description: 'An Authentication Factor object describes a category of methods used
  for

  identity verification in an authentication attempt.'
in_subset:
- objects_subset
from_schema: https://w3id.org/lmodel/ocsf
aliases:
- Authentication Factor
is_a: Object
slot_usage:
  device:
    name: device
    annotations:
      group:
        tag: group
        value: primary
    description: Device used to complete an authentication request.
    recommended: true
  email_addr:
    name: email_addr
    annotations:
      group:
        tag: group
        value: context
    description: The email address used in an email-based authentication factor.
  factor_type:
    name: factor_type
    annotations:
      group:
        tag: group
        value: primary
    recommended: true
  factor_type_id:
    name: factor_type_id
    annotations:
      group:
        tag: group
        value: primary
    required: true
  is_hotp:
    name: is_hotp
    annotations:
      group:
        tag: group
        value: context
    recommended: true
  is_totp:
    name: is_totp
    annotations:
      group:
        tag: group
        value: context
    recommended: true
  phone_number:
    name: phone_number
    annotations:
      group:
        tag: group
        value: context
    description: The phone number used for a telephony-based authentication request.
  provider:
    name: provider
    annotations:
      group:
        tag: group
        value: context
    description: The name of provider for an authentication factor.
    recommended: true
  security_questions:
    name: security_questions
    annotations:
      group:
        tag: group
        value: context
attributes:
  device:
    name: device
    annotations:
      group:
        tag: group
        value: primary
    description: Device used to complete an authentication request.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Device
    rank: 1000
    alias: device
    owner: AuthFactor
    domain_of:
    - AuthFactor
    - Evidences
    - Logger
    - ManagedEntity
    - HostProfile
    - ConfigState
    - DeviceConfigStateChange
    - EvidenceInfo
    - InventoryInfo
    - PatchState
    - SoftwareInfo
    - DataSecurityFinding
    - Finding
    - RdpActivity
    - TunnelActivity
    - SystemEvent
    - EventLogActvity
    range: Device
    recommended: true
  email_addr:
    name: email_addr
    annotations:
      group:
        tag: group
        value: context
    description: The email address used in an email-based authentication factor.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Email Address
    rank: 1000
    alias: email_addr
    owner: AuthFactor
    domain_of:
    - Whois
    - AuthFactor
    - DomainContact
    - User
    range: EmailT
  factor_type:
    name: factor_type
    annotations:
      group:
        tag: group
        value: primary
    description: The type of authentication factor used in an authentication attempt.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Factor Type
    rank: 1000
    alias: factor_type
    owner: AuthFactor
    domain_of:
    - AuthFactor
    range: string
    recommended: true
  factor_type_id:
    name: factor_type_id
    annotations:
      group:
        tag: group
        value: primary
    description: The normalized identifier for the authentication factor.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Factor Type ID
    rank: 1000
    alias: factor_type_id
    owner: AuthFactor
    domain_of:
    - AuthFactor
    range: FactorTypeIdEnum
    required: true
  is_hotp:
    name: is_hotp
    annotations:
      group:
        tag: group
        value: context
    description: Whether the authentication factor is an HMAC-based One-time Password
      (HOTP).
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - HMAC-based One-time Password (HOTP)
    rank: 1000
    alias: is_hotp
    owner: AuthFactor
    domain_of:
    - AuthFactor
    range: boolean
    recommended: true
  is_totp:
    name: is_totp
    annotations:
      group:
        tag: group
        value: context
    description: Whether the authentication factor is a Time-based One-time Password
      (TOTP).
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Time-based One-time Password (TOTP)
    rank: 1000
    alias: is_totp
    owner: AuthFactor
    domain_of:
    - AuthFactor
    range: boolean
    recommended: true
  phone_number:
    name: phone_number
    annotations:
      group:
        tag: group
        value: context
    description: The phone number used for a telephony-based authentication request.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Phone Number
    rank: 1000
    alias: phone_number
    owner: AuthFactor
    domain_of:
    - Whois
    - AuthFactor
    - DomainContact
    - LdapPerson
    - User
    range: string
  provider:
    name: provider
    annotations:
      group:
        tag: group
        value: context
    description: The name of provider for an authentication factor.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Provider
    rank: 1000
    alias: provider
    owner: AuthFactor
    domain_of:
    - Reputation
    - AuthFactor
    - Cloud
    - Enrichment
    - Location
    - Malware
    - ResourceDetails
    range: string
    recommended: true
  security_questions:
    name: security_questions
    annotations:
      group:
        tag: group
        value: context
    description: The question(s) provided to user for a question-based authentication
      factor.
    from_schema: https://w3id.org/lmodel/ocsf
    aliases:
    - Security Questions
    rank: 1000
    alias: security_questions
    owner: AuthFactor
    domain_of:
    - AuthFactor
    range: string
    multivalued: true