You can find the InCommon Baseline Expecations on InCommon's website: https://www.incommon.org/federation/baseline-expectations-for-trust-in-federation/ .