From the user's perspective, authentication, authorization, and access control often appear to be the same thing because they are typically implemented together. However, there are some important distinctions between them. Some of these are listed below to provide better clarity on what each of these concepts means:
Authentication: Authentication is a process by which you verify that someone or something is who or what they claim to be, respectively. It typically involves implementing one or more methods of demonstrating identity. The result of an authentication procedure is normally a yes/no answer.
Authorization: Authorization is used to establish whether the application or user (already authenticated) is allowed to perform the requested task. It is used to define and determine what an authenticated application/user can and cannot do. An authorization module typically includes a mechanism for defining rules (such as roles,...
