1. A multi-protocol authentication and authorization system comprising: a request interceptor configured to receive from a requestor a first request using a first transport protocol and a second request using a second transport protocol, wherein said first transport protocol and said second transport protocol are different transport protocols; and an authenticator for validating a digest received from said requestor, wherein said request interceptor is configured to authenticate said requestor if said digest is valid, a first criterion is applied to said first request, a second criterion is applied to said second request, and all of said criteria are met, and wherein said request interceptor is configured to constrain said requestor to one role in a requested application where said requests are made at different times not within a predefined time window, and a different role where said requests are made within a predefined time window.