Difference between Authentication and Authorization.

Difference between Authentication and Authorization.

Authentication It is process of identifying users. It is identifying / validating the user against the credentials (username & password) & authorization performs.  Web.config file in Authentication mode look like  <authentication mode="Forms">               <forms defaultUrl="Login.aspx">                    <credentials passwordFormat="Clear">                         <user name="abc" password="123"/>                         <user name="pqr" password="456"/>                         <user name="ati" password="111"/>                    </credentials>               </forms> </authentication>

Authorization It is process of granting access to those users based on identity. It is allowing access of specific resource to user. Web.config file in  Authorization mode look like      <authorization>       <deny users="pqr"/>     </authorization>