What is Authentication?

• Authentication means checking whether the users are who they say they are.

What is Authorisation?

• Authorization means to give those authenticated users permission to access a given resource.

Analogy

Consider two FBI agents, A1 and A2.

A1 has level-1 clearance and A2 has level-4 clearance.

• When they both reach the FBI office, the guard checks their IDs, confirms that they are legit officials, and allows them to enter the building.

This is known as authentication. 👆

Now, consider there is an underground hall in the FBI office where highly classified govt. operations are discussed.

• When A1 will try to enter this hall, he will be denied entry as he only has a level-1 clearance.

• On the other hand, A2 will be permitted to enter the arena as he has a higher clearance than A1, i.e level-4.

This is known as authorization. 👆

I hope this example will remain in your heads and you all can easily explain the difference between authorization and authentication to even a 3rd-grade student.

Feel free to connect with me on LinkedIn.

Cheers! 🤘