Mule ESB allows authentication of requests via various transport-specific and generic authentication methods. It also controls authorization at the method level on service components. The Security Manager authenticates requests based on security providers, and all security can be customized via the pluggable Mule security API.