I have an app that uses universal login, that means that users do not enter their credentials in the app for login. I wanna perform step up authentication for certain operations, but due to universal login, I don’t have the user credentials in the app, so I am looking for a passwordless approach to challenge the user with step up authentication without the user having to enter again his credential in each step up flow.
Thanks for reaching out to the Auth0 Community!
Just to confirm, while your application doesn’t have direct access to the user’s credentials it is receiving an access and/or id token after the user successfully authenticates, correct? If so you should certainly be able to add step-up authentication and I’ve added a link below to the docs that cover setting up step-up auth for API’s and web apps:
I hope this helps!
Thanks,
Matt
1 Like
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.