# Step-up status

Notification that a step-up has been completed or declined.

Endpoint: POST /stepup/watch
Version: v2

## Header parameters:

  - `call-ref` (string)
    A call reference generated by the caller and unique to the caller to provide correlation between the caller and system with a maximum length of 255

  - `published-timestamp` (integer, required)
    The timestamp, expressed in Epoch timestamp using millisecond precision, when this event was published.

  - `signature` (string, required)
    The signature to verify the authenticity of this request.  This is the base64 hash (HmacSHA256) of the `published-timestamp` using your API key.

  - `signature-v2` (string, required)
    The signature to verify the authenticity of this request.  This is the base64 hash (HmacSHA256) of the `call-ref + payload + published-timestamp` using your API key.

## Request fields (application/json):

  - `credential` (object, required)

  - `credential.type` (string, required)
    The type of user.
    Enum: "ROOT", "USER", "API_CLIENT"

  - `credential.id` (string, required)
    The identifier of the user.

  - `identity` (object, required)

  - `identity.type` (string, required)

  - `identity.id` (string, required)

  - `challengeId` (string, required)

  - `type` (string, required)

  - `status` (string, required)
    Enum: "VERIFIED", "DECLINED", "EXPIRED"

  - `publishedTimestamp` (string, required)
    Epoch timestamp using millisecond precision.

  - `authToken` (string)