This figure illustrates a sample authentication scheme where the Challenge Redirect parameter is set to the URL of the authentication WebGate (WebGate 10g-2).