An operation can involve changing or setting identity, such as logging in to the system, invoking an rcp or rsh command, using ftp, or using su. In those situations, a set of configurable modules is used to provide authentication, account management, credentials management, and session management.
The account management PAM module for projects is documented in the pam_projects(5) man page. The PAM system is documented in the man pages pam(3PAM), pam.conf(4), and pam_unix(5).