The next step up for high-impact identity authorization