Patent ID: 8635671

Claim:
A method comprising: receiving, by a security delegate module executing by a processing device, a first user authentication credential of a first user by a first application running a first instance in a first network; determining, by the security delegate module, a first security level associated with the first application; selecting, by the security delegate module, a first security service in view of the first user authentication credential and the first security level associated with the first application; sending the first user authentication credential to the selected first security service to at least one of authenticate or authorize a first user to use the first application; receiving, by the security delegate module, a second user authentication credential of a second user by the first application; selecting, by the security delegate module, a second security service in view of the second user authentication credential and the first security level associated with the first application, wherein the second security service is a different security service from the first security service; and sending the second user authentication credential to the selected second security service to at least one of authenticate or authorize the second user to use a second application.