Which of the following parameters must be provided by the edge client when requesting step-up...

In PingAM 8.0.2, when a client needs to trigger a specific authentication path—such as a higher-level tree for step-up authentication or a specific module for transactional authorization—it must tell the /authenticate endpoint which "Index" to use.

According to the PingAM "Authenticate over REST" and "Session Upgrade" documentation, these are governed by two mandatory parameters:

authIndexType: This defines thecategoryof the authentication mechanism being requested. Valid values include service (for Authentication Trees/Chains), module (for individual modules), or level (to request any mechanism that meets a specific Auth Level).

authIndexValue: This defines thenameof the specific instance. For example, if authIndexType is service, the authIndexValue would be the name of the Authentication Tree (e.g., StepUpMFA).

For a step-up or transactional request to succeed, the client must send these two parameters. While service (Option B and D) is a commonvaluefor authIndexType, it is not a parameter name itself.ForceAuth(Option C and D) is an optional boolean used to force a fresh login even if a session exists, but it is not a requirement for the basic routing of the request to the correct tree. Therefore,authIndexTypeandauthIndexValue(Option A) are the fundamental parameters required by the AM engine to identify and initiate the intended authentication journey.7