authentication

Authentication checks a claimed identity using evidence. For example, a user signs in with an email address and password. The system checks those credentials against previously stored information and decides whether the login is valid. Devices and applications can also authenticate, for example using a certificate or API key.

Which authentication methods are used?

Authentication can use something you know, such as a password or PIN. It can also use something you have, such as a phone, security key or access card. Biometric characteristics, such as a fingerprint, provide a third option.

Multi-factor authentication combines methods from different categories. After a password is entered, the system might ask for confirmation through an authenticator app. If one factor is compromised, an attacker still needs another. The chosen method and its implementation affect the strength of the check.

Authentication and authorization

Authentication and authorizationGlossary · In briefauthorizationAuthorization is the process of determining and enforcing which data and functions a user, device or application may access.Read more often happen one after the other, but answer different questions. Authentication establishes who is signing in. Authorization then determines which data and functions that user, device or application may access.

An employee might successfully sign in to a customer portal and pass authentication. The system can then grant access to customer details without allowing that employee to manage user permissions. A valid identity does not automatically grant access to everything in a system.