A network administrator is deploying port-based authentication so that laptops must prove their identity before gaining LAN access. In the 802.1X framework, the switch relays credentials but does not validate them itself. Which component is responsible for actually verifying the submitted credentials and returning an accept or reject decision?