The explanation of the proposed diagram is split into two main phases. Firstly, during the Token issuance stage, a user of the building, acting as a Subject, wishes to get an authorization token to be able to access services from the building. For this purpose, she uses a credential (e.g. her eID card) which is sent to the Request Handler service hosted in the Building Platform. This service redirects the subject to the Authentication component to be authenticated.