1 Introduction  
2 Authentication and Authorization Architecture Patterns  
2.1 Edge-Level Authorization  
2.2 Service-Level Authorization  
2.3 External Entity Identity Propagation  
2.4 Service-to-Service Authentication  
3 Recommendations for Application Security Architects  
4 Related Work  
5 Conclusion