- in the case no mic was present, but the user was found, the enterd password was ignored and the user authenticated