Come posso aggiornare il livello di fiducia tramite il sito SSO

If you trust your SSO users (say they are paid subscribers in some way) and the only way to log in is through SSO then sure, TL can default to TL1 no problem. That is a best practice.