Background
An InCommon Working Group have defined a Multifactor Authentication Profile and a Base Level Profile to support the use of different authentication context within IdPs. They have asked REFEDS to take these forward as REFEDS endorsed profiles within the REFEDS namespace to support interfederation.
In parallel the REFEDS Assurance Working Group has been developing a wider assurance wireframe that references authentication contexts. To support ongoing interoperability, it would make sense if the REFEDS defined profiles matched the requirements in the wireframe. The wireframe currently proposes:
- None;
- Good entropy;
- Multifactor.
Requirements and To Do
- Nicole has created a first draft of the MFA Profile. This needs completing and the comments resolving.
- Need to look at none / baseline. Are these the same or different?
- "Good entropy" can wait.
Add eIDAS substantial and Kantara AL3 as examples of MFA in the MFA spec?