1. A method for providing a security provider for a client, said method comprising: providing a service provider interface that is compatible with a security framework layer; providing one or more services wherein the one or more services include at least one of: authentication, authorization, auditing, role mapping and credential mapping; exposing the one or more services through the service provider interface; and wherein the framework layer exposes the one or more services to an application program interface.