Authentication and authorization mechanisms that are used to validate a user's identity and grant them access to a resource.