Authentication
SharePoint usually performs authentication through the IIS web server. IIS is responsible for authenticating users via Active Directory.
Another option is to use the ASP.NETforms authentication functionality for developing custom code that interacts with other user directories such as an Oracle database. Doing so requires bespoke development.
Authorization
SharePoint's security model is based around enrolling principals into SharePoint Groups, which are then granted permissions to a securable resource.
