Access Control
Identication
‣A user claims an identity
‣e.g. username
Authentication Authorization
‣ Verifying the claimed identity
‣e.g. password, token
Authorization
‣Verifying what the user is allowed to do
‣e.g. roles, permissions

Access Control
Identication
‣A user claims an identity
‣e.g. username
Authentication Authorization
‣ Verifying the claimed identity
‣e.g. password, token
Authorization
‣Verifying what the user is allowed to do
‣e.g. roles, permissions