Add a behavior to a sign-on policy rule

Add a behavior to an existing sign-on policy rule. All of the conditions of the rule in addition to the behaviors must be met to trigger the rule.

Procedure

1. In the Admin Console, go to Security > Authentication.

2. Select Sign On.
3. Click Edit rule beside the rule to which you want to add a behavior.
4. In the And behavior is field, enter the name of an existing behavior that was previously created. Start entering a behavior name. A dropdown of all matching defined behaviors appears from which you can select a behavior.
   • If you add multiple behaviors, they're considered OR conditions.
   • When added, these behaviors are evaluated along with any other items defined in the rule.
5. Specify the Allowed condition in the Then access is section.
   Note:

   You can't deny access to users based on behavior conditions. This limitation helps to prevent legitimate users from being locked out of their accounts. They're only denied access if multifactor authentication fails.

6. Click Create Rule.