¨Carries authentication data between  two entities that wish to set up an authenticated channel for communication ¨Supports one-time password, MD5 hashed username and password, and transport layer security