Step 1

Step 2

Authentication: Verification of users' claimed

identities by using one or more of the following:

secrets (what you know), tokens (what you have)

and biometrics (what you are and what you do).

Authorization: Determination that a user is

authorized to carry out a particular action, such as

logging on to a VPN, running an application,

accessing a database, etc.

Step 3

Step 4

Audit: Detailed logging of authentication and

authorization actions, with the ability to review

and analyse logs to uncover suspicious activities,

failures, etc.

Administration: System administrators can enrol

users and define policies that control

authentication and authorisation for particular

users, user groups, or applications.