Everything that manages how users authenticate, what they can access, and how their web sessions work