Best-fit and natural is to use the Assurance Framework that originated as collaborative work of R&E federations - the REFEDS Assurance suite https://wiki.refeds.org/display/ASS.
To insure identifier uniqueness:
To insure sufficient identity proofing and credential issuance, renewal, and replacement: