One of a finite number of predefined methods for an instance or subsystem that is used to determine how and where a user is authenticated before being permitted access to the instance or subsystem or to any objects found in that instance or subsystem.