Identification and authentication

A service can be a principal. If this is the case, it is identified by the principal's X.500 distinguished name (DN) and public key.

A service without a principal is known as an anonymous service. There is no built-in authentication. However, a service can be identified by the Warrants it has issued. Any warrant has only one service which it can bind to.