I'm sorry if my terminology caused you any confusion. What I was trying to convey was the fact that with TAI, the responsibility of authentication is not actually being done by the WebSphere Application Server (WSAS). It WSAS is communicating with, and depending upon some other entity to perform this authentication.
Does that make sense?