What is the difference between Authentication and Authorization?

Authentication verifies the identity of end users that tries to access the system and we can deploy strong authentication using such as biometrics, smart cards, Kerberos tokens and PKI certificates to authenticate users. We can also use centralized identity management such as enterprise user security (oracle OID or Microsoft active directory) to manage users.

Authorization determines the user’s privileges and roles to access a system.