A scope over which security policies are defined and enforced by a security administrator. A security policy domain has the following characteristics:

It has a collection of users (or principals).
It uses a well defined authentication protocol(s) for authenticating users (or principals).
It may have groups to simplify setting of security policies.