Basics – Authorization VS. Authentication

Two terms, two meanings. Yet, why are those terms that close in their spelling? Because those are closely related? to confuse? or to distinguish between a noob and a pro?

Anyhow – after reading this you will surely be part of the pros. At least considering this word defintion and spelling 😉

Authorization

The authorization to do something validates, that your actions and requests are “legal”. If you are not authorized for certain actions (etc.) your request is declined.

Put differently: authorization decides which actions are officially, legally permitted.

Check the latin root: auctorare

Authentication

Are you who you pretend to be? That is the first question of any system. The system does not know you in person. So it needs to verify your identity by authentication. The system either knows you by credentials (password, user name) or by tokens (e.g. SAML) that verify your identity.

Check the old greek root: authentikós

Please let me know if this entry helped. Did you find what you looked for? Was the described content clearly structured and well readable?

Thanks for your feedback!