Section 11.3.1 Top Level Accessing External Services (Web Services, Directories, Databases, OS) Sub Level 11.3 Authentication and Session Management General Follow Authentication and Session Management best practices as defined in Section 1 and Section 2 of this document.