
1. User provides username & password, like before, to the website
2. If password is verified, the user is redirected to the SafeTok Authentication Server, where all additional protection factors are verified. If required, user can also be prompted to confirm an action, like a money transfer.
3. SafeTok Authentication Server redirects the user back to the Website and informs the Website whether the user has passed authentication successfully or if there were any problems.
One of the important differences of SafeTok from a lot of other systems, is the concept of "authentication as a service". This design offers a lot of nice advantages, both in terms of convenience and enhanced security: