3.3.5.1 Receiving a Connect Command

A relay server MUST process a Connect as specified in section 3.1.5.1.

Additionally, if the Connect contains an AuthenticationToken field, it MUST be extracted and processed as specified by the SSTP Security protocol [MS-GRVSSTPS]. The ResponseId MUST be set to the value returned by the SSTP Security Protocol server processing. If [MS-GRVSSTPS] processing encounters an authentication error, it MUST provide a failure ResponseId of AuthenticationFailed (0x06) to be sent to the connection (1) originator. If [MS-GRVSSTPS] specifies a Security message to be returned to the connection (1) originator, it MUST be embedded in the AuthenticationToken field of the ConnectResponse.