autherization is nothing but validating how well the 
application built is allowing valid users and how well it 
is preventing invalid users.

Authentication is login in to the system permission to 
enter in to application

Authentication:

  This is the process to test whether the specific user is 
allowed to use or login to the application.



  But in Authorization, we test whether the specific user 
is allowed to access some controls or features of the 
system/application/software.  Eg: In an office automation 
tool, every employee can login to the application, but only 
accounts manager can access accounts related features, only 
HR manager or executive can access company inforamtion.

Authentication -> To check is that user having rights to 
enter

Authorisation -> Allow to only certain pages 

Vinodh Anandhan
Software Tester
Exceed Technologies
Chennai