3.2.5.2 Attempting to Access a Restricted Resource

On receiving an HTTP request for a URL designated by the partner server as requiring Passport SSI Version 1.4 Protocol authentication, the partner server MUST send the client a Partner Server Challenge message. The parameter names and values in this message are strictly a matter of prior agreement between the partner server and the authentication server, as specified in section 1.5.