Credentials were sent in a preference header. This includes user preferences, admin preferences, portlet preferences, community preferences, community portlet preferences, session preferences, or user info.
CredentialSource Class | Plumtree.Remote.Portlet Namespace