Abstract: One example of a system includes an authentication sever and an authentication consumer. The authentication server is to authenticate a user using an authentication process, collect environment specific attributes about the user during the authentication process, compute an assurance score based on the collected environment specific attributes, and generate an authentication assertion including the assurance score upon a successful user authentication. The authentication consumer is to receive the authentication assertion including the assurance score and make a local entitlement decision based on the assurance score.