Authorization, pre-Web (telnet)

Library Server

Patron Credential

Vendor Server

Institutional Credential

Logon

Session

Institutional credential should be invisible to patron, since they have no disincentive to share it with others.