``singleFactorCert``optional, booleanWhen the identity service scheme is SINGLE-FACTOR whether a certificate will authenticate the account.falsefalse