Ensuring that a user who accesses a software system is who they claim to be based on user credentials that they provide
Providing a secure and portable means of identification (a sealed security token) for a successfully authenticated user, so their identity can be recognized throughout the system
Validating this user identity in every component of the system before it can be used to authorize access to system features and data
