Reference Material | Identity service weight assignment
Note that for Secure Service Desk, weight assignment for identity services only applies to the policies set for the service desk agent logins. They do not apply to end users, since they will have to be pre-enrolled for all relevant identity services.
Once you know what identity services to use, you need to assign it a star-value. The number of stars assigned to an identity service should reflect how secure it is deemed. Here are some considerations when assigning a star value:
Specops/Google/Microsoft Authenticator: very secure, as they require a possession factor. Additionally, to obtain the secret code generated by the app, the user must unlock the phone and launch the application.
Social identity services: as secure as the password policy complexity requirement of the identity service.
Mobile Code: somewhat secure, as it requires a possession factor. However, unlike the Authenticator apps, the secret code can be displayed on the lock screen (depending on how the user has configured their phone setting).