A Web user requests a dynamic resource from a Web server. The Web server passes authentication information to an application so that the application can check the user's authorization to execute a method. Web user authenticates with enterprise security system. Note that authentication may be through e.g. the Web server. Enterprise security system provides an authentication reference to Web user.
Web user requests a dynamic resource from Web server, providing authentication reference.
Web server requests application function from application on behalf of Web user, providing Web user's authentication reference. Application requests authentication document from enterprise security system, corresponding to Web user's authentication reference. Enterprise security system provides authentication document, including authorization attributes for the Web user, and authn event description. Application performs application function for Web server. Web server generates dynamic resource for Web user.