That part of a security facility that verifies that a user is authorised to (a) sign on to a local or remote system (b) run a transaction and (c) to access the resources and use the commands that a transaction invokes. See also bind-time security.