Step-up authentication is when organizations require an additional level of authentication, often applied to higher-risk activities. Examples of step-up authentication include confirming receipt of information communicated via email or text message, providing identity documents, or providing other information that it would be unlikely for an imposter to possess.