How does identification differ from authentication?

Identification and authentication are two different stages in the access control process.

• Identification is the process of determining who is trying to gain access. The user declares their identity, for example, by entering a username or login.

• Authentication is the process of verifying whether the user really is who they claim to be. This usually involves checking a password, token, or biometric.

Example: when you log into a website, you enter your login (identification), and then your password (authentication). If the password is correct, the system confirms your identity and grants access.