Abstract: In a client computing system, a method for receiving credentials that can be used to can authentic with a server computing system, the method comprising: An act of receiving a limited-use credential; An act of establishing a secure link between the client computing system and the server computing system; An act of submitting the limited-use credential to the server computing system over the established secure link: and An act of receiving an additional credential that can be used for subsequent authentication with the server computing system, the additional credentials being provisioned at the server computing system based on the limited-use credential.