Authorization
The process of determining what actions an authenticated user or system is allowed to perform. Authorization answers the question "What can you do?" — through roles, permissions, or policy-based access control.
Definition
The process of determining what actions an authenticated user or system is allowed to perform. Authorization answers the question "What can you do?" — through roles, permissions, or policy-based access control.
Related Terms
OAuth
An open standard for access delegation. OAuth allows users to grant third-party applications access to their data on another service without sharing their password. It is commonly used for "Sign in with Google" and similar flows.
OIDC
OpenID Connect is an identity layer built on top of OAuth 2.0. It enables clients to verify the identity of an end-user and obtain basic profile information. OIDC is widely used for single sign-on and authentication.
Authentication
The process of verifying the identity of a user, device, or system. Authentication answers the question "Who are you?" — typically through passwords, tokens, biometrics, or multi-factor methods.