Step-up challenges
Issue and verify step-up challenges that elevate an existing user token.
A step-up challenge adds Strong Customer Authentication to an existing session before a sensitive action. Depending on the factors enrolled for the user, the challenge can use a one-time password or a push notification.
Start the challenge with the required channel, collect the user's response, and verify it to obtain an elevated authentication context. That context is valid for a limited period and only for the permissions it grants.
Read Step-up authentication for challenge channels and token handling.