Section 2.7.1 relates to an authorization server, which is different from an SSF Transmitter or Receiver. Therefore, the CAEP Interoperability Profile should clarify how this requirement relates to the SSF Tx and Rx.