TAGs: full authentication