Set LoA points granted by Identity Providers

Each identity provider federated with EmpowerID can be configured with a Level of Assurance (LoA) point value to help users reach the required number of points for accessing EmpowerID, as specified in their assigned Password Manager Policies. LoA points granted by an SSO Connection start at 0 and can be incremented based on the trust factor your organization places on the provider. For instance, when setting the number of LoA points for an IdP, you might choose to give a more trusted identity provider, such as the Windows IdP, a point value of 2 while assigning a less trusted IdP, like a social media IdP, a point value of 1 or 0.

If the IdP selected by users grants enough points to meet your policy requirements, those users are granted access once authenticated. If the IdP does not supply enough points, users must acquire additional points to gain access.

This article demonstrates how to set LoA points for the following identity providers:

External OAuth services
SAML identity providers

Set LoA points for External OAuth services

Expand Single Sign-On > SSO Connections on the navbar and click OAuth / OpenID Connect.
Select the External OAuth Services tab and search for the service to which you want to apply LoA points.
Click the Provider link for the service.
On the External OAuth Provider Details page that appears, click the Edit link for the provider.

=
Type the desired point value in the Level of Assurance (LoA) field and then click Save.

Set LoA points for SAML identity providers

On the navbar, expand Single Sign-On > SSO Connections and click SAML.
Search for the SAML identity provider to which you want to apply LoA points and then click the Display Name link for it.
On the View One page for the connection, click the Display Name link to put the connection in edit mode.
Select the General tab of the Connection Details form and then enter the desired number of points in the Level of Assurance (LoA) field.
Save your changes.

IN THIS ARTICLE