Step 1: Prerequisites

Before implementing Step-up MFA, ensure you have the basics set up

What You Need

Step-up MFA is designed to add an extra security layer on top of existing authentication. You need:

1. Transcodes Project - Create a project at app.transcodes.io 
2. Member session — the member must be signed in before step-up MFA

When to Use Step-up MFA

Step-up MFA is triggered after initial login, when users perform sensitive actions:

// User is already logged in
// Now they want to access admin panel
 
async function accessAdminPanel() {
  // Step 1: Check if user is authenticated
  const isAuth = await transcodes.token.isAuthenticated();
 
  if (!isAuth) {
    // Not logged in - redirect to login
    await transcodes.openAuthLoginModal();
    return;
  }
 
  // Step 2: Require MFA for admin access
  const mfaResult = await transcodes.openAuthIdpModal({
    resource: 'admin',
    action: 'read',
  });
 
  if (mfaResult.success && mfaResult.payload[0]?.success) {
    // MFA verified - show admin panel
    showAdminPanel();
  }
}

MFA vs Login

Supported MFA Methods

Users can set up one or more MFA methods:

• TOTP - Google Authenticator, Authy, 1Password
• Email OTP - 6-digit code sent via email
• Hardware Keys - YubiKey, FIDO2 security keys

What’s Next