This session is the remote end of a transport link from the acquisition session and validates authentication credentials sent to it. The basic method, authenticate() accepts a credential, validates it and returns an Authentication containing the identity of the authenticated user.

This OSID does not define any root interface for credentials and challenge data. The object representing these are completely defined within their Type ,providing flexibility in adapting to a variety of application environments.