policy-based challenge selection

Assess

Techniques

A rules-based method for choosing which authentication challenge a user should receive.

Why it's here

Placed in Assess: 1 article(s) of evidence from 1 source(s), led by framework updates, with 1 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.

Evidence (1)

6InfoQ·9/4/2026framework_update
Airbnb Cuts Authentication Code by 60% with Server-Driven Flows
Airbnb redesigned its authentication stack around server-driven flows and policy-based challenge selection in its Flexible Authentication system. The company says the change reduced authentication-related code by 60%, shrank the web client bundle by 100 KB, improved successful authentication by 2.6%, reduced duplicate account creation by 27%, and lowered OTP costs by 11%.