The AVM sets the value of this attribute, along with the LOGIN-STATE attribute, whenever the state of a client-principal object changes. You can also set the value of this attribute when calling the AUTHENTICATION-FAILED( ) method to place a client-principal object in an authentication failed state in order to specify a reason for the authentication failure.
