InCommon is operated by Internet2


About            Participants            Join InCommon


Becoming Certified

Community Trust and Assurance Board

Program Components


Assurance for Identity Providers

Assurance for Service Providers

Assurance Glossary

Federation Home Page

Assurance for Service Providers

Information for Service Providers

InCommon AssuranceThe InCommon Assurance Program enables Service Providers to reduce their risk by requiring Identity Providers to adopt a set of standard identity and electronic credential practices that meet service risk requirements.


Program Background
and Resources

Identity Assurance Assessment Framework [PDF]

Identity Assurance Profiles (Bronze and Silver) [PDF]

Approved Alternative Means

InCommon Federation Operating Policies and Practices [PDF]

NIST 800-63 [PDF]

List of Certified Identity Providers

Community Contributions wiki

Subscribe to the Assurance email list


Silver and Bronze logos

Am I eligible?

  • To request InCommon Identity Assurance Qualifiers from a certified Identity Provider, a Service Provider must be an InCommon Participant.

What do I have to do?

  1. Determine which Identity Assurance Profile aligns with your risk assessment. For guidance with this step, you can use E-Authentication Guidance for Federal Agencies [PDF], which provides a process for determining whether your service warrants requesting 800-63 Level 1 (InCommon Bronze) or Level 2 (InCommon Silver). NIST levels 3 and 4 are not supported by InCommon at this time.
  2. Configure your SAML software to use SAML V2.0’s AuthnContext mechanism, check InCommon metadata for official Identity Assurance Qualifiers at runtime, and to handle errors in the event the IdP can not satisfy your assurance requirements. For more information, see Assurance Technical Implementation Considerations on the wiki.
  3. Notify InCommon of your intent to request Bronze or Silver Profiles, by sending your contact information to admin AT You will be added to an email list to keep you up to date on developments and changes in the Assurance Program.

Copyright 2004-2018 InCommon LLC. All rights reserved. InCommon is operated by Internet2.