3.2.5.1.4 MS-Identity-Type
This attribute indicates whether a RADIUS server performs only a machine health check (as specified in [TNC-IF-TNCCSPBSoH]).
If a RADIUS server receives this attribute and its value is 0x00000001, the RADIUS server MUST NOT perform authentication; instead, it MUST perform a machine health check on this request. If a RADIUS server receives this attribute and its value is not 0x00000001, or a RADIUS server does not receive this attribute at all, it SHOULD perform authentication as well as a machine health check on this request.
The machine health check is performed as specified in [TNC-IF-TNCCSPBSoH], using the SoH statement received either in the MS-Quarantine-SoH attribute (see section 3.2.5.1.8) or inside the Extensible Authentication Protocol (EAP) packet (see [MS-PEAP] section 2.2.8.2.2).
For more details about this attribute, see section 2.2.1.6.