Preferred sign-in
For Internal and Government Assessors after first-time certificate binding.
OR
Fallback sign-in
Customers and 3PAOs use username/password with hardware token. Internal users may use this fallback only when CAC/PIV/PIV-I is unavailable.