Abstract
In the Shibboleth context, level of assurance (LoA) describes the identity provider's degree of certainty that the user presenting a credential is the user to whom it refers. LoA is a function of policy, process, and technology. This session will further explore the LoA concept by providing a case study and discussing key LoA components such as identity proofing and credential issuing processes, identifying relevant risk assessment factors, and reflecting on where and why LoA is important when deploying Shibboleth.