step-up-at-higher-level

Syntax

step-up-at-higher-level = {yes|no}

Description

This configuration entry controls whether an authentication mechanism that is higher than the requested step-up level is accepted during a step-up operation.

Options

yes
Authentication levels higher than the level specified in the POP are accepted during step-up operations.
no
Higher authentication levels are disallowed during step-up operations.

Usage

This stanza entry is optional.

Default value

no

Example

step-up-at-higher-level = no