Identity service weight assignment
Once you know what identity services to use, you need to assign it a star-value. The number of stars assigned to an identity service should reflect how secure it is deemed. Here are some considerations when assigning a star value:
Specops/Google/Microsoft Authenticator: very secure, as they require a possession factor. Additionally, to obtain the secret code generated by the app, the user must unlock the phone and launch the application.
Social identity services: as secure as the password policy complexity requirement of the identity service.
Mobile Code (SMS): somewhat secure, as it requires a possession factor. However, unlike the Authenticator apps, the secret code can be displayed on the lock screen (depending on how the user has configured their phone setting).