The TDGSS model allows a user running a client application to pick from a set of TDGSS mechanisms to establish a security context between the client and the Server Gateway. Teradata Negotiating (TDNEGO) automatically negotiates the sign-on mechanism so the user or client application does not have to specify it.