This application relates to a service access method and apparatus, where the method includes: obtaining, from system data, a first identifier corresponding to a service requesting unit; obtaining, from a first access request, a second identifier corresponding to a service, where the first access request indicates that the service requesting unit requests the service from a service providing unit; determining an authentication result based on the first identifier and the second identifier, where the authentication result indicates whether the service requesting unit has permission to access the service; when the authentication result indicates that the service requesting unit has the permission to access the service, generating a second access request; and sending the second access request to the service providing unit. The service access method and apparatus provided in embodiments of this application can improve service access security.