They don't refer to any roll-your-very own authentication protocols maybe you have produced employing login web pages, and many others. I'll use "login" to make reference to authentication and authorization by strategies aside from RFC2617 If HTTP authentication is not in use along with the company incorporates a cookie-based authentication http://pigpgs.com