Software that is responsible for authenticating end users and authorizing them to access network resources, such as IBM Tivoli Access Manager. See also credential mapper.