chore: add adaptive MFA doc

docs/end-user-flows/mfa/configure-mfa.mdx

@@ -34,6 +34,18 @@ If you need to prompt a user again after they skipped MFA enrollment, reset thei
 
 <img src="/img/assets/configure-mfa.png" alt="MFA settings" />
 
+### Adaptive MFA \{#adaptive-mfa}
+
+Adaptive MFA is an additional security layer that can be enabled separately from standard MFA. It relies on your existing MFA setup and only asks for MFA when sign-in behavior appears unusual. This helps balance user experience and security by applying extra verification only when needed. Adaptive MFA applies to end-user sign-in flows and does not rely on device fingerprinting or other sensitive personal data.
+
+To enable Adaptive MFA in Logto:
+
+1. Navigate to: <CloudLink to="/mfa">Console > Multi-factor auth</CloudLink>.
+2. In the **Policy** card, set **Require MFA** to **Adaptive MFA: Only ask for MFA when a sign-in seems risky**.
+3. Ensure at least one MFA factor is enabled in the **Factors** card.
+
+<img src="/img/assets/enable-adaptive-mfa.png" alt="Adaptive MFA settings" />
+
 ### Organization-level MFA configuration \{#organization-level-mfa-configuration}
 
 For products with a multi-tenant architecture that support [Organizations](/organizations), in most cases you don't need to require MFA for all users. Instead, MFA can be enabled on a per-organization basis, allowing you to tailor the requirements based on each client's needs. To get started, refer to [Requiring MFA for organization members](/organizations/organization-management#require-mfa-for-organization-members).