Components can be invoked by clients, other components, or servlets and JSPs. This chapter describes the various methods used to authenticate and authorize each type of client.