| Activity | Subactivity | Subsubactivity | mandatory/optional? | Increases/Decreases LoA |
|---|
| 1) 2FA token request | 1.1) User provides user info |
| mandatory |
|
| 2) 2FA (pre-)registration | 2.1) User selects 2FA token |
| mandatory |
|
| 2.2) User performs authentication with that token to prove possession |
| optional |
|
| 3) Identification | 3.1) Eligibility check of user |
| optional |
|
| 3.2) Vet identity of user |
|
|
|
|
| 3.2.1) Compare claimed/transmitted/spoken information with user's identity proof (e.g. ID doc, activation code) |
|
|
|
| 3.2.2) Check user's identity proof with it's original source for validity | optional | ↓ |
|
| 3.2.3) Record identity proof |
|
|
| 4) |
|
|
|
|