Single Authentication Realm

AKA Single Sign On or SSO

The domain space Single Authentication Realm is a system of LDAP Groups managed by a central authority.

Basically, I will trust you on a device if you are tx-authenticated or if the OS vendor for the device does which in the case of linux defaults to Google. Initially this suffices to become social-networked which is a path to becoming an entitled AKPERSON. Besides this third factor, two factor authentication and other measures may be in place to preserve space integrity.

The AKPERSON variant on the inet org entity is definitionally that the person has been authenticated in a transaction in the last 90 days, so that must have happened for at least a token amount.^*

An enduring association is made from the first attainment of AKPERSON status by a natural person which is DCP enforced. You may present multiple nicks and identities to others but the system must know who you are irl and that your account is uncompromised is assumed while it is entitled/tx-authenticated..

Core Domain Space is built and maintained for the use of its entitled and enfranchised tx-authenticated users ( Actually Known Persons), the free rider classes (ip-identified, social-networked) are provided limited service which may be refused by automation at any time.