Authenticate user User Service Authenticator Provide username Generate challenge Sign challenge Verify signature