Survey to ask federations about costs for LoA
General overview
- Do you have a LoA (schema) in place and which one?
- Do you have contracts with IdPs?
- Do you require an Identity Management Practice Statement? Do you enforce it?
- Do you require any audits/documentations for IdPs?
Level of assurance
- Have you made any cost analysis for introducing (a higher) LoA? Is a higher LoA want from IdPs?
- Any experiences, which costs IdPs have to make in order to achieve a specific LoA?
- Impacts on adopting LoA
Persons asked
- Mikael Linden, CSC
- Wolfgang Pempe, DFN-AAI
- Leif Johansson, SWAMID
- Tom Scavo, InCommon
Results
- YES - Do you have a LoA (schema) in place and which one?
- YES - Do you have contracts with IdPs?
- YES and NO, mostly in mother tongue - Do you require an Identity Management Practice Statement? Do you enforce it?
- Mostly only documentation, not enforced, some have self-audits or pairwise audits - Do you require any audits/documentations for IdPs?
- NO and NO - Have you made any cost analysis for introducing (a higher) LoA? Is a higher LoA want from IdPs?
- NO - Any experiences, which costs IdPs have to make in order to achieve a specific LoA?
- Between none till high costs - Impacts on adopting LoA