...
Field 3: Protocol (BAth, OAth and x509 are best practice). These should be no more than 4 chars long for logging consistency.
Field 4 (Optional): Request (If Field 3 exists, and is “AS”, then the calling services is requesting that the Identity be treated as the official Identity
...