What is the difference between identification, authentication, and authorization? What comes first?

Identification is the process of determining who is trying to gain access, that is, the user states their name or login.

Authentication is the verification of the user's identity, that is, confirming that they are indeed who they claim to be (for example, entering a password, biometric data, token).

Authorization is the determination of what actions or resources are permitted to this user after successful authentication.

Order: first identification (who?), then authentication (prove it’s you), and after that authorization (what you are allowed to do).