Identity AuthorityBootstrapping Identity in a Private SystemGovernment-Issued IdentificationNothing Beats MeatspaceExpectations and StarsStoring IdentityUser DirectoriesDirectory MaintenanceWhen to Authenticate IdentityAuthenticating for TrustTrust as the Authentication DriverThe Use of Multiple ChannelsCaching Identity and TrustHow to Authenticate IdentitySomething You Know: PasswordsSomething You Have: TOTPSomething You Have: CertificatesSomething You Have: Security TokensSomething You Are: BiometricsOut-of-Band AuthenticationSingle Sign OnMoving Toward a Local Auth SolutionAuthenticating and Authorizing a GroupShamir’s Secret SharingRed OctoberSee Something, Say SomethingTrust SignalsSummary