It has three major parts:

• The browser
• The web server
• The cookie server

These parts use the University Kerberos servers to identify an individual, then use the University PT servers to permit individuals to particular resources. To help visualize how this works, this is the path of a typical request.

Several services at the University of Michigan are using this mechanism to protect their pages.