step-up-at-higher-level
Syntax
step-up-at-higher-level = {yes|no} Description
This configuration entry controls whether an authentication mechanism that is higher than the requested step-up level is accepted during a step-up operation.
Options
- yes
- Authentication levels higher than the level specified in the POP are accepted during step-up operations.
- no
- Higher authentication levels are disallowed during step-up operations.
Usage
This stanza entry is optional.
Default value
no
Example
step-up-at-higher-level = no