# Super Admin cannot create API token how to step-up authenticate?

**URL:** <https://devforum.okta.com/t/super-admin-cannot-create-api-token-how-to-step-up-authenticate/33844>\
**Category:** API\
**Created:** [July 3, 2025, 4:03pm UTC](https://devforum.okta.com/t/super-admin-cannot-create-api-token-how-to-step-up-authenticate/33844 "2025-07-03T16:03:00Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![dkz](https://avatars.discourse-cdn.com/v4/letter/d/dbc845/32.png) [@dkz](https://devforum.okta.com/u/dkz)\
**Post date:** [July 3, 2025, 4:03pm UTC](https://devforum.okta.com/t/super-admin-cannot-create-api-token-how-to-step-up-authenticate/33844/1 "2025-07-03T16:03:00Z")

</div>

I created a trial integration account. I am the only user. I have the role Super Administrator. When I try to create an api token I get a message that I need to “step-up authentication”.

How do I step-up authenticate?

 ![image](https://global.discourse-cdn.com/oktadev/original/2X/3/34b3ac1ef4b0343d33d3d669f2828f182066c681.png)

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [July 3, 2025, 4:06pm UTC](https://devforum.okta.com/t/super-admin-cannot-create-api-token-how-to-step-up-authenticate/33844/2 "2025-07-03T16:06:39Z")

</div>

What should be happening here is that you should be challenged for an authenticator before you can complete this action.

Can you double check which authenticators you are currently enrolled in? If not enrolled in any additional factors, try enrolling in one (more) and trying again.

If its still not working, can you try making this update within an Incognito window or a different browser to see if you’re able to complete that step-up authentication?

---

<div class="post-metadata">

**Author:** ![dkz](https://avatars.discourse-cdn.com/v4/letter/d/dbc845/32.png) [@dkz](https://devforum.okta.com/u/dkz)\
**Post date:** [July 3, 2025, 4:19pm UTC](https://devforum.okta.com/t/super-admin-cannot-create-api-token-how-to-step-up-authenticate/33844/3 "2025-07-03T16:19:49Z")

</div>

Using an incgnito window made OKTA prompt me for my password and 2fa again when trying to create the token as you described.

I did not see a way to add another authenticater under /enduser/settings. It did list the Okta Verify app I had already set up. Logging in and out again did not resolve the issue.

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [July 3, 2025, 5:11pm UTC](https://devforum.okta.com/t/super-admin-cannot-create-api-token-how-to-step-up-authenticate/33844/4 "2025-07-03T17:11:10Z")

</div>

Glad you were able to get that token created at least!

I’ll also see if I can find out why this is happening when you attempt a Protected Action and if we are able to fix whatever is preventing you from seeing these authenticator challenges.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/oktadev/original/1X/589c4c5f80de422d01f47cee7185a7fb8227835c.png) [@system](https://devforum.okta.com/u/system)\
**Post date:** [July 4, 2025, 5:11pm UTC](https://devforum.okta.com/t/super-admin-cannot-create-api-token-how-to-step-up-authenticate/33844/5 "2025-07-04T17:11:49Z")

</div>

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.