First page Back Continue Last page Overview Text
Notes:
AS, if the user so chooses, sets a session cookie so it can securely identify the user if he/she is referred to AS again during this browser session
AS redirects BR to the URL supplied in the authentication request, along with an authentication reply message
The reply message is cryptographically signed