The term authenticator as used herein includes user-supplied domain passwords, user IDs, tokens, or smart cards, biometrics, SAML assertions, other types of assertions and any other information provided by a user or on a user's behalf in order to authenticate the user to the network or system hosting the secure resource the user is requesting.