You'd have to write custom code for that and understand how the authentication flow works. I don't think that conditional OTP thing would work if somebody logged into client A without OTP then visited client B as the cookie authenticator would trigger and just let client B have access. We have plans to implement "step up" authentication, but that is not for awhile. On 2/26/17 9:03 PM, Adam Keily wrote: