Authentication and Authorization Concepts and Workflow