Monday, February 15, 2010

What is difference between authentication and authorization?

  • Authentication is the mechanism whereby systems may securely identify their users. Authentication systems depend on some unique bit of information known only to the individual being authenticated and the authentication systems. Authorization is the mechanism by which a system determines what level of access a particular authenticated user should have to secured resources controlled by the system.
  • When a user logs on to an application/system, the user is first Authenticated, and then Authorized.

No comments:

Post a Comment