A subscriber may possibly already have authenticators suitable for authentication at a certain AAL. For example, They might Have got a two-element authenticator from the social network provider, viewed as AAL2 and IAL1, and would like to use those credentials at an RP that requires IAL2.Impl