Tag · 2 articles

Step-Up Authentication

Oct 22, 2026 · 8 min read

Keycloak Step-Up Authentication: ACR, LoA Flows and the Cookie Bypass Gap

How to configure Keycloak step-up authentication with ACR to LoA mapping, a conditional browser flow, acr_values and essential claims, plus the max age and Cookie authenticator pitfalls that let weaker sessions through.

May 25, 2026 · 6 min read

Implementing Step-Up Authentication for Sensitive Operations

Learn how to implement step-up authentication for securing sensitive operations. Complete guide with code examples and security tips.