Which of the following parameters must be provided by the edge client when requesting step-up authentication or transactional authorization?

For edge-initiated step-up or transactional authorization, the client must indicate which higher authentication context to invoke by supplying the query parameters authIndexType (typically set to service or module) and authIndexValue (the name of that service/module). No other parameters are mandatory.

B – “service” is not a separate parameter; it is the value of authIndexType.

C – ForceAuth is optional; only authIndexType/value are required.

D – Lacks the mandatory authIndexValue and misuses “service”.

1. ForgeRock Access Management 7.3 Authentication & SSO Guide, §6.6.4 “Requesting Step-Up Authentication” (authIndexType & authIndexValue required).

2. ForgeRock Identity Gateway 7.2 User Guide, §“Step-Up Authentication with AM” (lists mandatory parameters).