Reference Material | Identity service weight assignment
Once you know what identity services to use, you need to assign it a star-value. The number of stars assigned to an identity service should reflect how secure it is deemed. Here are some considerations when assigning a star value:
Specops/Google/Microsoft Authenticator: very secure, as they require a possession factor. Additionally, to obtain the secret code generated by the app, the user must unlock the phone and launch the application.
Social identity services: as secure as the password policy complexity requirement of the identity service.
Mobile Code: somewhat secure, as it requires a possession factor. However, unlike the Authenticator apps, the secret code can be displayed on the lock screen (depending on how the user has configured their phone setting).
For more tips on identity service configuration, check out our Identity Service Selection Guide.