Authentication is the process of verifying that “you are who you say you are”
Authorization is the process of verifying that “you are permitted to do what you are trying to do”