发送端断言的标识采用为初始登录（例如，用户 ID、DN、证书）提供的原始凭据的形式。

The identity asserted on the sending side takes the form of the original credentials provided for the initial login (for example, user ID, DN, certificate).

youdao

为了尽可能减少对应用程序和用户的影响，我们将已有的凭据加载到了Web Identity中，从而允许用户保留其原始凭据，而无需进行修改。

In order to minimize the impact on applications and users, pre-existing credentials were pre-loaded into Web Identity, allowing users to retain their original credentials without change.

youdao

在其他的情况下，不能使用传播令牌的方法来传播原始用户凭据。

In other cases, the original user credentials cannot be propagated the way tokens can be.

youdao