passive
authentication
Passive authentication (also known as web-based
authentication) is when the client application redirects the user to a web form managed
by a trusted identity provider. The identity provider can request any number of
credentials (passwords, security tokens, biometric verifications, and so on) to create a
multi-layer defense against unauthorized access. This is also known as multi-factor
authentication.