Federation Assurance Level

nief:1.0:user:FederationAssuranceLevel

FederationAssuranceLevel

There are 3 Federation Assurance Levels representing the assurance level of the user's federated assertion: FAL1 (low assurance), FAL2 (moderate assurance), and FAL3 (high assurance) based on NIST SP 800-63-3.

1.0

IDPs should assert this for all assertions sent to RPs correctly identifying the level of assurance of the assertion. The RP can also derive the FAL if not asserted.

FAL1, FAL2, FAL3

N/A

N/A

If a RP ever derives a FAL that does not match the one the IDP asserted, they should consider the assertion at the lower of the two values, and may consider this an unrecoverable error condition requiring the IDP to be properly configured.