What the ILS knows
Username
Password (hash)
Email address
Security questions