...
Default security provider with password salt and hashing.
Security provider integration with/delegation to third-parties, including SAML/SSO and LDAP/AD for centralized security.
Access may be monitored and revoked.
Password reset/recovery self-service.
...