# Step-up Auth without Super Admin API Token

**URL:** <https://devforum.okta.com/t/step-up-auth-without-super-admin-api-token/5706>\
**Category:** Questions\
**Created:** [July 18, 2019, 2:50pm UTC](https://devforum.okta.com/t/step-up-auth-without-super-admin-api-token/5706 "2019-07-18T14:50:42Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jbrooks](https://avatars.discourse-cdn.com/v4/letter/j/df705f/32.png) [@jbrooks](https://devforum.okta.com/u/jbrooks)\
**Post date:** [July 18, 2019, 2:50pm UTC](https://devforum.okta.com/t/step-up-auth-without-super-admin-api-token/5706/1 "2019-07-18T14:50:42Z")

</div>

I’d like to add step-up authentication to a custom Java application. The problem is, when the following it fails unless I use an API token with the super admin role.

VerifyFactorRequest request = client.instantiate(VerifyFactorRequest.class);  
VerifyFactorResponse response = factor.verify(request);

Is there a way to verify a factor with a read-only admin role? Can I use the auth widget for step-up auth?

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [January 17, 2024, 11:47pm UTC](https://devforum.okta.com/t/step-up-auth-without-super-admin-api-token/5706/2 "2024-01-17T23:47:39Z")

</div>