Authentication
Authentication is the process of verifying that a user, system, or entity is genuinely the one it claims to be before access is granted.
- Acronym
- AuthN
- Synonym
- AuthN
Definition
Authentication is the process of verifying that a subject really is who or what it claims to be before granting access to a system, application, API, or digital resource. In IAM, authentication typically relies on one or more factors such as something the user knows, something the user has, or something the user is. Authentication establishes identity confidence, but does not by itself determine what actions are allowed; that belongs to authorization.
Why it matters
Authentication is the entry point of trust in any IAM architecture. If authentication is weak, every downstream control becomes less reliable.
The Ariovis perspective
Access Management secures authentication and access journeys in real time. It should remain aligned with identity governance, which manages lifecycle, roles and evidence over time.
Related services
Common pitfalls
- A common mistake is confusing authentication with authorization and assuming that proving identity is enough to control access properly.
Standards and protocols
- NIST SP 800-63B
- ISO/IEC 27001
- OAuth 2.0
- OpenID Connect
- SAML 2.0
- FIDO2/WebAuthn
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.