When clients need to authenticate, SMART App Launch implementation guide defines two methods: