> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Risk Score

Get a real-time risk score for a user before completing a critical task or action.

The risk score ranges from 0 to 100, where 0 is low risk and 100 is the highest risk. Use this as part of authentication flows to determine if step-up MFA is needed.

The score accuracy improves as more training data is supplied via the `Track Event` action.

**Required Scope**: `Authentication Only`, `Read Users`, `Manage users`, `Read All`, or `Manage All`.

<Note>
  External Documentation

  To learn more, visit the [OneLogin documentation](https://developers.onelogin.com/api-docs/2/vigilance/verify).
</Note>

## Basic Parameters

<div className="integrations-table">
  | Parameter          | Description                                                                                                                |
  | ------------------ | -------------------------------------------------------------------------------------------------------------------------- |
  | IP                 | The IP address.                                                                                                            |
  | User Agent         | The user agent string.<br /><br />**Example:** `Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_3)`                           |
  | User Authenticated | Select to include if the metadata should be trusted.                                                                       |
  | User ID            | The ID of the user. For OneLogin Adaptive Authentication, use format: `{region}_{OneLogin User Id}` (e.g., `US_12345678`). |
  | User Name          | The name of the user.                                                                                                      |
</div>

## Advanced Parameters

<div className="integrations-table">
  | Parameter   | Description                                                         |
  | ----------- | ------------------------------------------------------------------- |
  | Device ID   | The device ID (e.g., `xxx-xxx-xxx`)                                 |
  | FP Cookie   | The value of the `__tdli_fp` cookie.                                |
  | Session ID  | The session ID (e.g., `xxxx-xxxxx-xxxxx-xxxxx`)                     |
  | Source ID   | The ID of the source, based on a group, customer, account, or user. |
  | Source Name | The name of the source.                                             |
</div>

## Example Output

```json theme={"dark"}
{
	"score": 24,
	"triggers": [
		"Accessed from a new IP address",
		"Infrequent access from 125.238.248.246",
		"Infrequent access from Auckland, Auckland, New Zealand",
		"Infrequent access using Chrome on Macintosh",
		"Low trust for session"
	],
	"messages": []
}
```

## Workflow Library Example

[Get Risk Score with Onelogin and Send Results Via Email](https://library.blinkops.com/workflows/get-risk-score-with-onelogin-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/get-risk-score-with-onelogin-and-send-results-via-email/canvas" />
</div>