Because the REST API is within the integration framework, the REST API can use process automation engine authentication, authorization, and system properties. The REST API controller is a servlet.