Credentials are protected using a security token, thus typically offering multi-factor authentication by combining something the user has such as a mobile application[3] that generates rolling a Token similar to virtual smart card, smart card and USB stick, something the user knows (PIN or password), and/or something the user is like biometrics such as a fingerprint, hand, retina, or face scanner.