A construct hosted inside Microsoft Internet Information Services (IIS) that receives Web requests (including those for Web services) and returns appropriate responses.
The process of determining who a user is, usually via a username and password combination.
The process of determining whether a user has permission to perform a particular task.