Authentication is performed at the user's home institution, using their institutional credentials.