Reference Material | Identity service weight assignment
Once you know what identity services to use, you need to assign it a star-value. The number of stars
assigned to an identity service should reflect how secure it is deemed. Here are some considerations
when assigning a star value:
Specops/Google/Microsoft Authenticator: very secure, as they require a possession factor.
Additionally, to obtain the secret code generated by the app, the user must unlock the phone and
launch the application.
Social identity services: as secure as the policy complexity requirement of the identity service. You can
check the complexity requirements of popular sites on here.
Mobile Code: somewhat secure, as it requires a possession factor. However, unlike the Authenticator
apps, the secret code can be displayed on the lock screen (depending on how the user has configured
their phone setting).