1. A security system for allowing a client to access a protected resource, comprising: an application interface mechanism for receiving an access request from a client application to access a protected resource, and communicating said access request to a security service; a security service for making a decision to permit or deny said access request; and, a resource interface for communicating permitted access requests to said protected resource.