Requiring additional authentication factors when accessing sensitive resources or performing high-risk actions within an authenticated session.