In earlier releases of Avaya Experience Portal, the EPM user authentication was based only on password validation. From Release 7.2, certificate-based authentication is combined with password-based authentication resulting in a two-factor authentication. This two-factor authentication is an extra layer of security that requires not only a user name and password but validates the user certificate as well.