PAM is a system security tool that allows system administrators to set authentication policy without having to recompile programs that handle authentication.