Risk Service Unavailable

When an Adaptive access assessment is unavailable after a number of unsuccessful evaluation attempts, the policy action corresponding to the Medium Risk level of the Adaptive access policy is returned.
The event and report will show the reason "Risk Service Unavailable - Medium Risk Applied.".

This error will be returned when

• a recoverable error, such as a "error":"adaptive_more_info_required" is encountered multiple times
• a non-recoverable error such as service interruption is encountered

In the Adaptive access report

• Reason will contain "Risk Service Unavailable - Medium Risk Applied."
• Session ID may contain a valid value for example pp629e475c7b6fa646e5b7606a61b3bec35ebde151600944772 or an empty value (-)
• Adaptive details will contain empty values (-) for all Risk indicators

Recoverable error

During recoverable errors, an Adaptive access evaluation is unavailable due to insufficient data including

• no or invalid Session ID
• mismatch of snippet id being copied or reused between IBM® Security Verify tenants and Native Web applications
• incomplete collection

Only after multiple unsuccessful collection and corresponding evaluation attempts will the Medium Risk level of the Adaptive access policy be returned.

Use the Events service API or Adaptive access report to determine the Session ID.

• If no Session ID is available, refer to

  • Insufficient data
  • Collection did not commence
  • Collection did not complete

• If there is a Session ID in event or report, refer to

  • Checking system status

Non-recoverable error

A non-recoverable error is not able to return an assessment result. To provide a consistent level of protection (fail closed) the action corresponding to the Medium Risk level of the Adaptive access policy is returned.
Ensure you have

1. checked the system status for dependant services
2. waited for the Native App onboarding to complete in either IBM® Security Verify administration console or IBM® Security Verify Developer portal application.

---

Next: Unexpected evaluation decision

Previous: No event or report