New opportunity for enhanced security – support for AL3 introduced

AL levels are used to describe how securely a user’s identity has been verified:

• AL1 – the account is created but the identity is not verified
  
  
• AL2 – the user is verified, for example via BankID or a physical ID check
  
  
• AL3 – the highest level of assurance, requiring both strong identity verification and a connection to multi-factor authentication (MFA) within the same session.

The introduction of AL3 is part of SLU’s ongoing efforts to strengthen identity and access management. More services within the higher education and research sector are beginning to require this level, particularly for handling sensitive information and digital signing.

For more information about AL levels and how to increase your level, see IDportal – New login level at SLU – what you need to know.

What does this mean in practice?

For most users, this will not affect daily work at this stage. AL3 will primarily be used for specific services that require a higher level of security, such as certain types of signing or access to sensitive information.

When a service requiring AL3 is introduced, users will receive clear instructions on what actions are needed.

Why is AL3 being introduced now?

The introduction follows the growing number of services that require higher levels of assurance. Enabling AL3 ensures that SLU can continue to use these services in a secure and reliable way.