What is the difference between identification, authentication, and authorization?

Identification is the process of determining who is trying to gain access, usually by providing a unique identifier (such as a login or username).

Authentication is the verification of the identity, confirming that the user is indeed who they claim to be. This is typically done through a password, token, biometrics, etc.

Authorization is the process of determining the rights and access levels of a user to resources after successful authentication. For example, whether the user is allowed to read, write, or modify data.

Example:

• The user enters a login (identification).
• The system checks the password (authentication).
• After login, the system checks what actions are permitted for this user (authorization).