← All practicals

Climb the assurance ladder

Make identity verification MATTER — unlock a real gated action only at the top rung.

1. 1

   Try the high-value action right away.

   It's refused with step_up_required — a live session alone (level 0) isn't enough for a sensitive action.

2. 2

   Step up with a fresh TOTP code, then try again.

   Now it's refused with idv_required instead — a fresh second factor (level 1) proves you still hold the factor, but not who you are.

3. 3

   Complete identity verification at the strong (document + liveness) tier, then try one more time.

   Only stepped-up AND ial2-identity-verified (level 2) clears the gate — an ial1, document-only result deliberately does not reach the top rung. This is the whole point: IDV finally UNLOCKS something.