The ID services you can use will depend on the identity assurance level you need for your service. You need to determine how secure your service needs to be and how to adequately protect personal information in your service.
The level is about how sure you need to be that you have the right individual, organization or device. In other terms, it refers to the difficulty one would have trying to use someone else’s account to access a service.
Level 3: High confidence Use when you need a high level of confidence of a person’s identity and that their identity information is verified. For example, when your service has sensitive or confidential information. |
Level 2: Some confidence Use when you only need some confidence. For example, when someone obtains a business or fishing licence. |
Level 1: Little to no confidence Only use when you need little confidence of a person’s identity and there is no requirement to link the person to a specific real-life identity. Since no verification is required, any information provided by the individual should be treated as self-asserted. |
Read more about this:
IM/IT Standards - Identity Assurance Standard
Some ID services provide more confidence in who the user is.
ID service | Identity Assurance Level |
---|---|
Level 3 | |
Level 2 | |
Business BCeID | Level 2 (business info) Level 1 (person info for who is representing business) |
Level 1 | |
Microsoft guest account |
Level 1 |
Level 1 | |
Varies by credential | |
Federated accounts |
Varies by organization |
Assurance levels depend on the strength of the Identity proofing process and the types of credentials and authentication mechanisms used during a transaction.
For identity proofing, the level of assurance depends on the:
For authentication, the level of assurance depends on the:
Compare by: