FusionAuth, the Customer Identity and Access Management (CIAM) service made with security, scaling, and deployment flexibility in mind, released a new version named FusionAuth 1.68. They added Intelligent MFA, which is a deterministic, based on rules authentication engine. Instead of the risk evaluation software tools that are typically built only for multiple-tenant cloud environments and are not transparent, FusionAuth’s new feature examines login attacks with 10 configurable signals. Some examples of those are unrecognized devices, impossible traveling, block listed IPs, and dormant accounts. It is an engine that, after evaluating those signals, can classify the sessions into low, medium or high risk categories. Because the composite scoring logic remains visible, compliance teams can explicitly verify why an access attempt was challenged rather than relying on ambiguous cloud-model assumptions.
Also Read: ThreatModeler Debuts Nexus Platform for Agentic Security Design
Crucially, the feature runs natively within any environment an organization selects whether hosted via dedicated FusionAuth Cloud, on-premises, or air-gapped infrastructure allowing enterprise buyers to scale security without forfeiting architectural control or data visibility. The product rollout addresses a massive industry shift highlighted in the firm’s 2026 State of AI and Identity Report, which revealed that organizations relying on shared multi-tenant identity infrastructure suffered security breaches at more than double the rate of those utilizing self-hosted platforms. Highlighting how this transparent architecture helps security and compliance teams successfully manage increasing regulatory scrutiny, Brian Bell, CEO of FusionAuth, stated: “Security teams do not just need stronger authentication. They need authentication they can explain. When an auditor, board member, customer, or regulator asks why a user was challenged, ‘the model said so’ is not a satisfying answer. Intelligent MFA gives teams a clear policy, clear signals, and a clear record of what happened.”