PAM (modules)

A Unix and Linux framework for integrating authentication methods.

Pluggable Authentication Modules is a Unix and Linux framework that lets administrators configure authentication, account, session, and password policies through stackable modules without changing each application. It allows methods such as local passwords, multi-factor prompts, or directory lookups to be combined flexibly. Misconfiguration can weaken security, for example by allowing a bypass or failing open, so module ordering and control flags matter. This framework should not be confused with Privileged Access Management, an unrelated discipline that happens to share the acronym.