Generating modular security delegates for applications

An apparatus comprising:

• a memory;
• a processor communicably coupled to the memory;
• a first application instance executable from the memory by the processor, the first application instance being part of an application that is distributed over a plurality of networks, the first application instance to:
• receive a first set of user authentication credentials;
• identify, using a directory interface, a network location of a directory;
• list, by the directory interface, a first security delegate in view of a network location of the first application instance of the application and in view of the network location of the directory;
• select the first security delegate;
• and
• the first security delegate communicably coupled to the first application instance, the first security delegate to:
• receive the first user authentication credentials from the first application instance;
• and
• determine whether the first user authentication credentials are valid in view of a first security level defined for a first network of the plurality of networks, the first network associated with the first security delegate;
• wherein the first security level defined for the first network is different than a second security level defined for a second network of the plurality of networks that determines validity of second user authentication credentials received from a second application instance of the application, the second network associated with a second security delegate.

A non-transitory machine-readable storage medium having instructions, which when executed by a processor, cause the processor to perform operations comprising:

• receiving, by a first application instance of an application executed by the processor, a first set of user authentication credentials;
• identifying, using a directory interface, a network location of a directory;
• listing, by the directory interface, a first security delegate in view of a network location of the first application instance of the application and in view of the network location of the directory;
• selecting, by the first application instance of the application, the first security delegate;
• receiving, by the first security delegate, the first user authentication credentials from the first application instance of an application;
• and
• determining, by the first security delegate, whether the first user authentication credentials are valid in view of a first security level defined for a first network of the first security delegate;
• wherein the first security level defined for the first network of the first security delegate is different than a second security level defined for a second network of a second security delegate that determines validity of second user authentication credentials received from a second application instance of the application.