Best-fit and natural is to use the Assurance Framework that originated as collaborative work of R&E federations - the REFEDS Assurance suite https://wiki.refeds.org/display/ASS.

To ensure identifier uniqueness:

To ensure sufficient identity proofing and credential issuance, renewal, and replacement: