Authentication happens against the WASF certificate service (SSO) β wasf-website never stores your password.