  Approved client-server authentication mechanisms are described for the IVOA
single-sign-on profile: No Authentication; HTTP Basic Authentication; TLS with
passwords; TLS with client certificates; Cookies; Open Authentication; Security
Assertion Markup Language; OpenID. Normative rules are given for the
implementation of these mechanisms, mainly by reference to pre-existing
standards. The Authorization mechanisms are out of the scope of this document.
