Some details

• What is it?

  • A centrally-managed, password-based authentication system for web-based services

• What does it give you?

  • An authenticated CRSid for a browser user

• Why?

  • DIY userid/pwd tedious and commonly insecure
  • IP-based access control too lax and too restrictive