Not because the password was wrong, but because the rules had changed—silently, in real time. That’s adaptive access control in action, and testing it is harder than building it.
Adaptive access control changes its decisions based on context. It looks at a user’s location, device, network, time