Entities such as clients, Servers, and users should prove their identities. Authenticationcan be based on something the entity is, has, or knows.