Articles in this section

What is Knowledge-Based Authentication KBA frequency?

Published:

KBA frequency controls how often a signer must complete knowledge-based authentication (KBA) when accessing a document. This setting helps senders choose the right balance between security and signer convenience.

KBA frequency can be configured in Business Profile settings and can also be reviewed when KBA authentication is added to a signer.

KBA frequency

KBA frequency options

BoldSign supports the following KBA frequency options:

  1. Every access

    • The signer must complete KBA every time they access the document.

    • Use this option when the document contains highly sensitive information or when every document access must be strongly verified.

  2. Every access until signed

    • The signer must complete KBA each time they access the document until they finish signing. After the signer completes their signature, KBA is no longer required for later access to the same document.

    • Use this option when the signing action needs strong protection, but repeated verification is not required after the signer has completed signing.

  3. Once per document

    • The signer must complete KBA only once for the document. After successful verification, the signer can return to the same document without completing KBA again.

    • Use this option when signer convenience is important and one successful KBA verification is enough for the document workflow.

Choose the right KBA frequency

Choose the frequency based on the sensitivity of the document and the level of access control required.

  • Use Every access for the highest level of security.
  • Use Every access until signed when authentication is most important before signing is completed.
  • Use Once per document when one successful verification is sufficient.

KBA frequency applies only to signers who have KBA authentication enabled.

If a signer fails KBA or reaches the maximum allowed attempts, the frequency setting does not override the failure state. The signer must complete KBA successfully, or the sender must reset KBA authentication before the signer can continue.

Was this article useful?
Like
Dislike
Help us improve this page
Please provide feedback or comments
Access denied
Access denied