AWS cognito: Document managed login step-up parameters
Summary
Adds a note that managed login supports step-up authentication using acr_values and max_age on authorize and login endpoints.
Security assessment
Documents supported authentication parameters for enforcing stronger or fresher authentication requirements in managed login.
Evidence
+Managed login supports step-up authentication with the `acr_values` and `max_age` parameters on the authorize and login endpoints. For more information, see the [authorize endpoint](./authorization-endpoint.html#authorization-endpoint-step-up) and [login endpoint](./login-endpoint.html#login-endpoint-step-up).
Diff
diff --git a/cognito/latest/developerguide/cognito-user-pools-managed-login.md b/cognito/latest/developerguide/cognito-user-pools-managed-login.md index bcc834a..f46a5da 100644 --- a//cognito/latest/developerguide/cognito-user-pools-managed-login.md +++ b//cognito/latest/developerguide/cognito-user-pools-managed-login.md @@ -41,0 +42,2 @@ For more information about constructing requests to managed login and hosted UI +Managed login supports step-up authentication with the `acr_values` and `max_age` parameters on the authorize and login endpoints. For more information, see the [authorize endpoint](./authorization-endpoint.html#authorization-endpoint-step-up) and [login endpoint](./login-endpoint.html#login-endpoint-step-up). +