step-up-at-higher-level
step-up-at-higher-level = {yes|no}Description
This configuration entry controls Whether an authentication mechanism that is higher than the requested step-up level is accepted during a step-up operation.
Options
yes Authentication levels higher than the level specified in the POP are accepted during step-up operations. no Higher authentication levels are disallowed during step-up operations.
Usage: Optional
Default: no
Example:
step-up-at-higher-level = no