Time Factor (Authentication).

A contextual authentication factor that restricts or evaluates access based on the time of day, day of week or duration of a session, often combined with risk-based policies. It belongs to the Identity & Access category of cybersecurity.

A contextual authentication factor that restricts or evaluates access based on the time of day, day of week or duration of a session, often combined with risk-based policies.

The time factor uses time as a contextual signal in modern authentication: access is permitted only during allowed windows (for example, weekdays 08:00-19:00 local time) or rejected outside them. Identity platforms like Microsoft Entra Conditional Access, Okta and SailPoint, plus on-prem solutions such as Active Directory logon-hour restrictions, enforce time-based rules to limit help-desk impersonation, contractor accounts and privileged sessions. Time can also be implicit in TOTP one-time passwords (RFC 6238) where the OTP value is valid only for a 30-second window, or in just-in-time (JIT) access models that grant privileges for a bounded duration. Time alone is supplementary, not a primary credential.

Defences for Time Factor (Authentication) typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: Time-based factor, Temporal factor, Logon hours.