18-Sep-12 at 8am the SSO will be updated with the latest configuration following the latest “Identities, Authentication & Authorization“ definitions, providing an “Identity Class” parameter.

An Identity Class is a unique value representing the level of assurance (LoA) of the user and the authentication method used to access the application.

The defined classes are:

CERN Registered: Represents the currently active CERN primary accounts.
CERN Shared: Represents the currently active CERN secondary and service accounts.
HEP Trusted: HEP people registered in the CERN HR database, authenticating using their HEP systems (through Federation).
Verified External: Ex-members of personnel, like retirees, former staff, etc. They still have an entry in the CERN HR database but no CERN account anymore.
Unverified External: Anonymous unverified people, like external/lightweight accounts, Facebook/Google accounts, Federation accounts not verified.

More details on http://cern.ch/login