Possession factor
A possession factor is an authentication factor based on the claimant’s control of a required physical item or device.
Acing the CCNA Exam: Volume 2 Advanced Networking and Security
A possession factor is an authentication factor based on an item or device that the user possesses.
- How it is used
- Classifies authentication evidence used to strengthen access control through multifactor authentication.
- How deep it goes
- Defines the category and identifies examples, but does not detail implementation or configuration procedures.
- Examples
- Uses ID badges, smartphones, SMS codes, push notifications, and authenticator apps generating one-time codes.
- What you can do after
- Evaluate authentication methods and identify which ones represent possession factors in MFA scenarios.
Read how Acing the CCNA Exam: Volume 2 Advanced Networking and Security explains possession factor →
Authorization in Action
A possession factor is an authentication factor based on an object or device that the claimant is expected to possess.
- How it is used
- Strengthens direct authentication by requiring evidence that the requester controls a designated object or device.
- How deep it goes
- Defines the factor, lists implementations, explains vulnerabilities, and traces registration and login without detailing device protocols.
- Examples
- Uses smartphones, hardware tokens, smart cards, security keys, SMS or email OTPs, push notifications, and authentication apps.
- What you can do after
- Apply it via multifactor authentication by binding a possession method to an identifier and verifying it during login.
Read how Authorization in Action explains possession factor →
Related concepts
- authentication factorkind of · An authentication factor is an independent category of evidence used to verify a subject’s identity during authentication.
- one-time codeincludes · A one-time code is a temporary authentication credential accepted for a single attempt or operation, or during a limited validity period.
- multifactor authenticationpart of · Multifactor authentication is an authentication method that verifies identity using evidence from at least two distinct authentication-factor categories.
- password authenticationused by · Password authentication is an authentication method that verifies a claimed identity or access by checking a supplied secret password or passphrase.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.