---
title: Hardening PingAM authorization
description: Use PingAM policy advice to harden authorization in PingGateway, requiring conditions like secure channels or higher authentication levels
component: pinggateway
version: 2025.11
page_id: pinggateway:gateway-guide:stepup
canonical_url: https://docs.pingidentity.com/pinggateway/2026/gateway-guide/stepup.html
llms_txt: https://docs.pingidentity.com/pinggateway/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2026-06-02T09:37:52Z
superseded_by: https://docs.pingidentity.com/pinggateway/2026/gateway-guide/stepup.html
---

# Hardening PingAM authorization

To protect sensitive resources, AM policies can use additional conditions to harden the authorization. When AM communicates a policy decision to PingGateway, the decision includes advice to indicate extra conditions the user must meet.

Conditions can include requirements to access the resource over a secure channel, access during working hours, or a higher authentication level. Learn more in AM's [Authorization](https://docs.pingidentity.com/pingam/8/am-authorization/preface.html) documentation.

The following pages build on the policies to [Enforce AM policy decisions](pep.html):

* [Stepping up the PingAM authentication level](stepup-sso-session.html)

* [Authorizing a single transaction with PingAM](stepup-sso-trx.html)