Identity Assurance Level 3 Profile

Within the Identity Federation SWAMID is trust that universities, university colleges and other members manage users and logins good enough the foundation for Service Providers to be confident that it is the right user that is accessing the system. To define what is good enough SWAMID has decided on two Assurance Profiles for Identity Providers and their users.

The Assurance Profile SWAMID AL3 means three things:

1. Extension of SWAMID AL2.
2. The Member Organisation has more positively identified the user, this is also known as a verified user.
3. Multi-factor login is mandatory.

Current Assurance Profile SWAMID AL3:

• SWAMID Identity Assurance Level 3 Profile

When applying for SWAMID AL3, the Member Organisation must supply with the application:

• Assurance Declaration for SWAMID AL3 through an Identity Management Practice Statement describing how the Member Organisation fulfils the Assurance Profile.
• All documents, or link to the publicly published documents, referred to in the Assurance Declaration.

SWAMID Audits the Member Organisation based on the Assurance Declaration.