Step-up Auth

⚡ 3 min read

Already signed in, but the action is dangerous — prove it again with biometrics on Transcodes Auth. The documented path today is the web app (SDK). AI Agent (MCP) step-up is Coming Soon.

When step-up applies

RBAC permission level 2 (allow + step-up) on a {resource}:{action} pair. Level 0 blocks; level 1 proceeds without MFA.

Configure the matrix in RBAC. Actions are always create · read · update · delete.

Shared flow

Surface	Who calls	Human UI	Who polls
Web app	`redirectToStepUp()`	New tab on Transcodes Auth	SDK in your page
AI agent	Coming Soon	—	—

Session TTL: 10 minutes. MFA UI is never embedded in your app or IDE — always the hosted auth page.

Audit trail

SDK step-up leaves before and after records when MFA completes. AI Agent (MCP) gate audit is Coming Soon. See Webhook.

Guide

Step 1: Prerequisites Step 2: Web app (SDK)Step 3: AI agent (MCP) — Coming Soon Step 4: Outcome and audit

Legacy modal integrations are deprecated. New web-app integrations use the redirect SDK flow.