¿Cómo puedo actualizar el nivel de confianza a través del sitio SSO?

If you trust your SSO users (say they are paid subscribers in some way) and the only way to log in is through SSO then sure, TL can default to TL1 no problem. That is a best practice.