Substantial — SSO
Substantial assurance (SSO resume)
Citizen reused an existing eID portal session to access another application without repeating MFA. The original authentication time is preserved in auth_time.
https://eid.gov.sx/loa/substantial-ssoWhen this level is issued
- Citizen already signed in to the eID portal
- OIDC authorize resumed via citizen portal session
- SXM SSO session reuses federated eID login
Authentication methods (amr)
| amr | Meaning |
|---|---|
session | SSO session resume — no fresh MFA |
Guidance for relying parties
RPs must treat this differently from fresh MFA. For sensitive actions (payments, signing, data export), require step-up authentication in a future phase.
Substantial context via existing session.