1.5 Applicability Statement

The PAC structure can be used to transport authorization information from the DC to the client's operating system. In addition to the user's group membership information, the PAC can include additional credential information, profile and policy information, and supporting security metadata.