Title: Authentication vs Authorization
Course: Introduction to SSL/PKI > Section: Miscellaneous

Authentication xa Authorization

Many people confuse authentication and authorization, but they are not the same. They are two seperate and distinct functions.

Authenticate

Determine your identity (your identity within a system)

Authorization

Determine what resources you are allowed to access and what you are allowed to do with those resources.

Authorization is usually based on your identity or what group(s) your ideltity belong to.

Resources include (but are not limited to):

  - files
  - directories
Note: many access controls are based on directories, not individual files.
  - programs/applications
  - Peripherals(printer, CD drives, etc.)
  - Network(s)