A cognitive function test (such as remembering a password or solving a puzzle) is not required for any step in an authentication process unless that step provides at least one of the following:
- Alternative – Another authentication method that does not rely on a cognitive function test
- Mechanism – A mechanism is available to assist the user in completing the cognitive function test
- Object Recognition – The cognitive function test is to recognize objects
- Personal Content – The cognitive function test is to identify non-text content the user provided to the Web site
Questions & Answers
What is the difference between AA and AAA accessible authentication?