Wie kann ich das Vertrauenslevel über die SSO-Website aktualisieren

If you trust your SSO users (say they are paid subscribers in some way) and the only way to log in is through SSO then sure, TL can default to TL1 no problem. That is a best practice.