What is step-up authentication?
In short:Step-up authentication asks for stronger proof before a sensitive action, even within an active session. For agents, it usually means the responsible person confirms with a stronger factor. It ties a high-risk agent action to a fresh, deliberate human decision rather than to an old login.
How does it work?
The policy engine detects a sensitive action and triggers a challenge to the person, often a biometric prompt.
What does it look like in practice?
A NewCore approver confirms a risky call with device biometrics in the NewCore App.