Comment puis-je mettre à jour le niveau de confiance via le site SSO

If you trust your SSO users (say they are paid subscribers in some way) and the only way to log in is through SSO then sure, TL can default to TL1 no problem. That is a best practice.