Auth tokens validated by a central entity (a bunch of servers really) for user (mobile apps, etc) to service communication.