...
Still another alternative is a local account "activation" process based on knowledge-based authentication of the subject. The user may prove him or herself through the matching of local data to Attributes obtained during federated login, or by directly prompting the user for the information. Once activated, the user's account can be associated to a unique identifier as in the more direct linking approaches.
- Account Linking
- User Experience
- Identity Assurance Implications
...