Authentication that adjusts requirements based on risk assessment. Low-risk scenarios use simpler methods; high-risk triggers additional verification steps.