adding SFA credential validation