authentication between 2 SPs server side and client side