Both authentication and authorization are terms used in information security and intelligently controlling access to computer resources. Authentication is the process where by an individual’s (user's) identity is confirmed, whereas authorization is the association of that identity with rights/privileges and permissions to resources related to information security.
