Kerberos
Classic authentication protocol from MIT — a ticket system for secure login without sending passwords over the network.
The heart of Windows Active Directory. The KDC (Key Distribution Center) issues tickets with limited lifetime. Protection against replay attacks. Complex (three different ticket types) but immensely battle-tested. Name from Greek myth: three-headed dog.