is a modular framework that separates authentication tasks from the applications that use them. Instead of hardcoding authentication methods into every program (like login , sshd , or sudo ), developers call the PAM library, which executes shared modules to verify user identities. Core Architecture and Purpose

PAM acts as a middleware layer between applications and the underlying authentication mechanisms.

: Administrators can define complex authentication policies for different services in a single set of configuration files.