Sign in over TLS to a server presenting serverName, trusting the public web PKI: the address layer's TLS sibling of signIn. An app uses Tenant.signIn, which finds the addresses itself.
serverName
signIn
Tenant.signIn