...
3.2.Initial proof of identity
How important is it for you that
- the Home Organization has a documented identity vetting process (whatever it is) in English and you can study it?
- each Home Organisation has a tag that indicates how the organization carries out identity proofing and the tag is from a well-defined international vocabulary?
- each user in a Home Organisation has the above tag but different end users in the organization can have different tags (depending how their identity was initially proofed)?
- The identity proofing is done face-to-face based on a government photo-ID or equivalent?
...
- Are password-based authentication good enough for you?
- Or should passwords have some kind of quality floor? (What kind of quality floor?)
- Do you need two factor authentication? (What kind of?)
...
3.4.Step-up authentication as a service
...
Step-up authentication means that the user first authenticates with a password, and subsequently with a second factor (such as by an a one-time password delivered to his/her cellphone). Step-up authentication could be delivered to research communities as a service.
Would you like to make use of step-up authentication
- if it costs you money?
- if it costs you work (for instance, you need to operate one or several registration authorities where your community's users come to show their photo-ID and you record their cellphone number)?
...