A method, performed by at least one apparatus (110, 510, 610, 71), comprising: - receiving an authentication request related to authentication of a user of an electronic device (130, 530, 630, 73) towards a server of a service provider (120, 520, 620, 72), from the server of the service provider; - obtaining a first information, wherein the first information is included in the authentication request or the first information is obtained together with the authentication request, wherein the obtained first information is usable for checking or causing checking of an integrity of the electronic device (130, 530, 630, 73) and/or at least one application (131, 531, 532, 631, 632) of the electronic device (130, 530, 630, 73); - checking or causing checking of the integrity of the electronic device (130, 530, 630, 73) and/or of the integrity of the at least one application (131, 531, 532, 631, 632) of the electronic device (130, 530, 630, 73), wherein the obtaining of the first information is performed prior to the checking or causing checking of the integrity, wherein the first information comprises a result of a validity check and/or information on a time when the validity check was performed, wherein the first information is used as a reference in the checking of the integrity of the electronic device (130, 530, 630, 73) and/or of the integrity of the at least one application (131, 531, 532, 631, 632) of the electronic device (130, 530, 630, 73); - performing or causing authentication of the user of the electronic device (130, 530, 630, 73); and - returning or causing returning of authentication information towards the server of the service provider (120, 520, 620, 72); wherein at least a part of the authentication information and/or the returning of at least a part of the authentication information is indicative of the user having been authenticated by the authentication, and wherein at least a part of the authentication information and/or the returning of at least a part of the authentication information represents that the electronic device (130, 530, 630, 73) and/or the at least one application (131, 531, 532, 631, 632) has/have been considered integer by the checking. - receiving an authentication request related to authentication of a user of an electronic device (130, 530, 630, 73) towards a server of a service provider (120, 520, 620, 72), from the server of the service provider; - obtaining a first information, wherein the first information is included in the authentication request or the first information is obtained together with the authentication request, wherein the obtained first information is usable for checking or causing checking of an integrity of the electronic device (130, 530, 630, 73) and/or at least one application (131, 531, 532, 631, 632) of the electronic device (130, 530, 630, 73); - checking or causing checking of the integrity of the electronic device (130, 530, 630, 73) and/or of the integrity of the at least one application (131, 531, 532, 631, 632) of the electronic device (130, 530, 630, 73), wherein the obtaining of the first information is performed prior to the checking or causing checking of the integrity, wherein the first information comprises a result of a validity check and/or information on a time when the validity check was performed, wherein the first information is used as a reference in the checking of the integrity of the electronic device (130, 530, 630, 73) and/or of the integrity of the at least one application (131, 531, 532, 631, 632) of the electronic device (130, 530, 630, 73); - performing or causing authentication of the user of the electronic device (130, 530, 630, 73); and - returning or causing returning of authentication information towards the server of the service provider (120, 520, 620, 72); wherein at least a part of the authentication information and/or the returning of at least a part of the authentication information is indicative of the user having been authenticated by the authentication, and wherein at least a part of the authentication information and/or the returning of at least a part of the authentication information represents that the electronic device (130, 530, 630, 73) and/or the at least one application (131, 531, 532, 631, 632) has/have been considered integer by the checking. wherein at least a part of the authentication information and/or the returning of at least a part of the authentication information is indicative of the user having been authenticated by the authentication, and wherein at least a part of the authentication information and/or the returning of at least a part of the authentication information represents that the electronic device (130, 530, 630, 73) and/or the at least one application (131, 531, 532, 631, 632) has/have been considered integer by the checking.