No matter how the user accesses an app, authentication is the first step. This allows the user to identify themselves. Modern access management technology must be able support all types of authentication and, more importantly, be able manage when each one is used. The next critical capability is to protect and manage the user's session once they have been authenticated. This capability unifies user experience across multiple apps while simultaneously delivering single-sign-on. It also protects the user's session from hijacking. Access management technology must also be capable of performing authorization checks when a user requests access to an application. These capabilities are provided by modern access management technology.