On the Home page, click Identity Servers > [cluster name] > Authentication > Contracts > Plus icon.
Specify a name to identify the contract.
You can use an existing authentication contract or create a new authentication contract. For example, for Risk-based Auth Class, you can add the default Name/Password – Form method as the first method and risk-based authentication method as the second method. For Risk-based Pre-Auth Class, the risk-based authentication method must be configured as the first method.
Click the Plus icon under Authentication Card and configure a card for the contract. For more information about configuring contracts, see Configuring Authentication Contracts.
NOTE:To use this contract in federation, ensure to assign this to a protected resource.