auth - credential federation service