Each Yanel realm can have its own IdentityManager and PolicyManager,  whereas the IdentityManager is reponsible for authentication and the PolicyManager for Authorization. Additionally a Yanel realm can also have its own WebAuthenticator, which can make sense if custom HTTP headers are being used, such as for instance for Single-Sign-On solutions.