Authentication vs Authorization

 Authentication vs Authorization

While authentication and authorization are often used interchangeably, however they are separate processes.

Authentication is the act of validating that users are whom they claim to be. This is the first step in any security process. 

Authorization in system security is the process of giving the user permission to access a specific resource or function. 

In simple terms, suppose you are the employee of ABC company, whenever you enter to the ABC company's premise you have to show your identity card to security guard, or you show that iCard to door and door gets opened so that’s authentication. As you have entered to company, now you can go to your desk, you can also go to Cafeteria however you are not allowed to go server room as you don't have permission/access of server room that’s authorization.