Step-Up Auth Guru
Experience Step-Up Authentication
Step-up authentication adds an extra layer of security for sensitive operations — requiring users to re-verify their identity only when it actually matters, even if they're already logged in.
Layered Security
Only the sensitive action needs extra proof — not your whole session.
Stronger, Not Repeated
Step-up adds an extra check before the sensitive action — your passkey if you have one, or a one-time email code if you don't.
Live in the Token
Watch the su claim appear on your JWT the instant you verify — no guessing what changed under the hood.
Loading...
Resources
What is Step-Up Auth?
Require a stronger factor only for sensitive actions, and mark the session with the su claim.
Learn More →Session Validation
Check the session token's claims on your backend before allowing a protected action.
Learn More →