What is Level of Assurance?
Level of Assurance (LoA) is the confidence you have in an identity or authentication event. Higher assurance requires stronger evidence at enrollment and more stringent checks at runtime. It’s an ordinal scale, where one thing’s LoA is higher than another: the LoA for viewing invoices is lower than the LoA for making withdrawals.
How to use it: level your product tiers, map each tier to a set of acceptable evidence (documents, biometrics, liveness, device binding), and gate features with it. Thresholds and artifacts should be logged so decisions can be audited months later. As risk surfaces, like a new device or cross‑border transfer, dynamically escalate the required LoA.
