...
We discussed whether high assurance of identity versus authorization status was needed for ongoing access to high value consumer accounts. Although it could be argued both ways, we agreed that a true high assurance identity verification authentication may require a biometric, and that other forms of authentication do not strictly bind a specific person to an online account or protected resource. We agreed that a requirement for high assurance identity authentication versus authorization status will depend on the trust framework that governs the trust relationships between consumer, identity provider, and service provider / relying party.
...