connor9853

[last temple]

Your understanding for any and challenge are correct. For automatic, you're right, we're using our own logic to determine whether to request an exemption for additional authentication. If that exemption is granted, a customer is not prompted for additional authentication. If it is not granted, then we direct the customer to complete authentication