Accordingly, CSPs Must allow the binding of extra authenticators to your subscriber’s account. In advance of adding the new authenticator, the CSP SHALL first have to have the subscriber to authenticate at the AAL (or a greater AAL) at which The brand new authenticator might be made use of.