Mutual authentication takes place in LCP, where the LNS validates the PPP interface on the remote CPE and vice-versa. LNS takes the same actions to authenticate the peer as it does on incoming calls.
The LNS obtains the PPP username and password from the initial Access-Accept message. It then provides this information to the remote CPE for authentication.