On identity assurance in the presence of federated identity management systems