Identity Engines solves the principle mobility challenge plaguing most organizations today-how to authenticate individuals on porous networks and provision them with the minimum-necessary authorization privileges consistent with their role in or relationship to the organization. Operating at the convergence point of networking, security, and identity management, Identity Engines renders consistent and correct admission and authorization decisions through rich policies that not only interrogate identity and role-based privileges, but also location, time of day or day of the week, and method of access.