Authentication & Authorization: How Applications Know Who You Are and What You Can Do

Every application eventually has to answer two deceptively simple questions: Who are you? and: What are you allowed to do? A login screen answers only the first question. The second one is where t