In a monolithic architecture, all the subsystems are in one application: authentication and authorization, session manager, business logic, etc. If we are talking about microservice architecture, some things get more complicated.

Microservices

In a microservice architecture, as a rule, authentication/authorization is a separate service.