Entities such as clients, Servers, and users should prove their identities. Authentication can be based on something the entity is, has, or knows.