Select an authentication-oriented security policy — client ID enforcement, OAuth 2.0 access token enforcement, JWT validation, or basic authentication — to verify caller identity for a stated security requirement.