The thinking behind name is that this one gets the authn method based on the service (whether via param or reg service attribute), but internally it's the WebApplicationService that encapsulates this authn method request. Later I'm thinking to define an API called PrincipalBasedAuthenticationMethodRetriever with impl for principal attributes, etc.