Step-Up Auth Orchestration

Risk-scored challenge routing from signal to verified resume or abandoned transaction

Step-Up Auth Orchestration Risk-scored challenge routing from signal to verified resume or abandoned transaction 01 / Risk Signals 02 / Decision Engine 03 / Challenge Orchestration 04 / Verification 05 / Transaction EX / Abandon Assess Challenge Settle Risk Signal · device, velocity, geo · Risk Signals › Assess Risk Signal device, velocity, geo Score Risk · map score to tier · Decision Engine › Assess Score Risk map score to tier No Challenge · frictionless pass · Transaction › Assess · low risk No Challenge frictionless pass low risk Challenge · OTP / biometric / 3DS · Challenge Orchestration › Challenge Challenge OTP / biometric / 3DS Pending · await user, TTL · Challenge Orchestration › Challenge Pending await user, TTL Verify Factor · validate response · Verification › Settle Verify Factor validate response Resume Txn · authorize original · Transaction › Settle Resume Txn authorize original Abandon Txn · failed or expired · Abandon › Settle Abandon Txn failed or expired evaluate step up response verified low risk failed Legend User UI Agent logic Policy Tool action Context / trace

Risk Decides Friction

  • • One score routes traffic before any prompt
  • • Low risk resumes with no challenge at all
  • • Factor strength scales with the risk tier

Pending Is A State

  • • An issued challenge holds the transaction open
  • • The pending state carries a TTL and retry budget
  • • Verification, not issuance, unblocks the txn

One Of Two Exits

  • • Verified factor resumes the original transaction
  • • Failed or expired challenge abandons it cleanly
  • • No challenge is left silently unresolved

Workflow diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • [/] views • P play story • T theme • E export