Independent identity management systems

A method for performing multi-factor authentication, comprising:

• receiving, at a master identity provider (M-IdP), a request from a service provider to authenticate a user who has requested access to a service via a user equipment (UE), the request including an indication of an authentication requirement and an identity of the user associated with the M-IdP;
• determining a plurality of authentication factors capable of achieving the authentication requirement;
• performing an authentication for select factors;
• obtaining a result of the authentication for the select factors and combining the results to create an authentication assertion that indicates successful authentication in accordance with the authentication requirement;
• and
• sending the authentication assertion to the service provider.

An apparatus comprising:

• a memory comprising executable instructions;
• and
• a processor in communications with the memory, the instructions, when executed by the processor, cause the processor to effectuate operations comprising:
• receiving, at a master identity provider (M-IdP), a request from a service provider to authenticate a user who has requested access to a service via a user equipment (UE), the request including an indication of an authentication requirement and an identity of the user that is associated with the M-IdP;
• determining a plurality of authentication factors capable of achieving the authentication requirement;
• based on the user identity associated with the M-IdP, determining an identity of the user or the UE associated with select ones of the determined authentication factors;
• using the identities associated with the select ones of the authentication factors, requesting an authentication for each select factor;
• receiving a result of the authentication for each select factor and combining the results to create an authentication assertion that indicates successful authentication in accordance with the authentication requirement;
• and
• sending the authentication assertion to the service provider.