Authorization and Authentication - What Is The Difference?

Authentication is process of identification and verification of web application visitor.

Web application tries to recognize who is the user. For example, ASP.NET application could use Windows authentication or Forms authentication to identify user.

Authorization is process that comes after authentication and means that application is checking if user have rights to access to some part of web application. Very common example is administration area of site. Depending of user rights, application will allow or deny access to specific pages on site.

Related articles:

1. User registration and authentication for an ASP.NET 2.0 webs
2. How To Delete Site Member From ASP.NET Membership

Add to bookmark: