Open
Description
Placeholder to look into. I don't believe the portions of proofing that leverage posession of an authenticator bound to an identity are all that correct. Need to confirm. For example, at IAL/AAL3, do we allow just one digital form of evidence or 2? We should be allowing 1 if the underlying proofing requirements meet the IAL the user is enrolling for.