Example: “where you are” also requires entity to have LSS
and GPS, so also “what you have”
• Can assign different methods to different tasks
– As users perform more and more sensitive tasks, must authenticate
in more and more ways (presumably, more stringently) File
describes authentication required
• Also includes controls on access (time of day, etc.), resources, and
requests to change passwords
– Pluggable Authentication Modules