...
- authenticationDuration - length of time in minutes that the authentication method associated with this login handler is active; default: 30 minutes
- authenticationServletURL - context-relative path to the servlet responsible for collecting using credentials and authenticating the user; default: /Authn/UserPassword
...