Substantial (LoA 2)
Substantial assurance
Citizen authenticated with password plus a second factor (SMS OTP or authenticator app). This is the default assurance level for government sign-in after MFA.
https://eid.gov.sx/loa/substantialWhen this level is issued
- Password + SMS OTP after MFA verification
- Password + TOTP authenticator app after MFA verification
- MFA recovery flow completed (includes recovery in amr)
Authentication methods (amr)
| amr | Meaning |
|---|---|
pwd | Password verified |
sms | SMS OTP used |
otp | TOTP authenticator used |
recovery | Recovery path used when applicable |
Guidance for relying parties
Suitable for most citizen-facing government services. RPs should accept this level unless the service requires passkey-only or fresh step-up authentication.
Conceptually aligned with eIDAS LoA Substantial.