Are there any step-up authentication systems that trigger on risky actions and support device binding?

Yes. What you’re describing is usually called risk-based / adaptive authentication with step-up, and many systems support device binding so a known device can help reduce prompts while still requiring stronger auth for risky actions.

Common capabilities to look for

• Risk-based step-up: triggers extra verification for high-risk events like:
  • new device or browser
  • unusual location/IP
  • impossible travel
  • account recovery
  • password change
  • adding a payment method
  • changing MFA settings
  • large transfers / sensitive transactions
• Device binding: ties a device to the user/session using:
  • platform authenticators / passkeys
  • device certificates
  • cryptographic device keys
  • push-based approval on a registered device
  • token binding / secure device recognition

Examples of vendors/products in this space

• Okta Adaptive MFA / Identity Engine
• PingOne Risk / PingFederate + MFA
• Microsoft Entra ID Conditional Access
• Auth0 Adaptive MFA
• ForgeRock Identity Platform
• Cisco Duo with trusted endpoints/device trust features
• OneLogin Adaptive Authentication
• Akamai / F5 / RSA identity and fraud/risk offerings
• Authsignal, Descope, Trusona, HYPR for passwordless + device-bound auth flows

Standards/approaches involved

• FIDO2 / WebAuthn / passkeys: strong support for device-bound credentials
• TOTP/SMS/push: often used for step-up, though less secure than passkeys
• Device certificates / mutual TLS
• JWT/session binding or token binding-like approaches in custom implementations

If you’re evaluating one

Ask whether it can:

1. trigger on specific risk events or application actions
2. support policy-based step-up
3. use phishing-resistant authenticators like passkeys
4. maintain device trust/binding across sessions
5. integrate with your IdP and app backend
6. provide step-up APIs/SDKs for custom workflows

If you want, I can give you:

• a shortlist by use case (banking, SaaS, consumer app, enterprise)
• a comparison table
• or a reference architecture for implementing this yourself.