Your organization requires phone approval for administrative changes

Symptom

An administrative change is refused with «This organization requires Presence approval for administrative changes. Approve on your phone to continue.» The API answers 403 presence_step_up_required. A passkey is not enough.

Cause

Your organization chose «Require phone approval» under «Manage» › «Security». With it, only a phone or Presence-device approval confirms administrative changes.

Fix

1. In the confirmation dialog, choose «Approve on my phone».
2. On the phone, open the «Approve the browser sign-in» request, type the screen's code and approve.
3. Repeat the change.

Other messages:

I lost my phone and I am an administrator

Another administrator with an active phone can make the change, or reset your authenticators. This setting cannot be undone with a passkey.

When to escalate

If no administrator has an active phone, nobody can administer: contact your provider at once. This is handled as an incident.