It is always difficult to me define authentication versus authorization. So now and forever I’l write it down to myself.
- Authentication: It is a process of verification that verifies “Who you are” (it confirms that you are a valid (or invalid) user).
- Authorization: It is a process of verification that verifies “What to do” (It confirms you are permissible to do (or not to do) that).
source from http://www.c-sharpcorner.com/UploadFile/56fb14/custom-authorization-in-mvc/