| Authentication | Authorization |
| It is the process of verifying the identity of a user. | It is the process of checking whether the user has the access rights to the system. |
| It always proceeds to authorization. | It is the process of allowing an authenticated user access to resources. |
| It has two separate levels because all the requests coming through the IIS before it is handled. | It allows two ways to authorize the access to a given resources. |
| They have additional schemes like windows authentication, forms authentication and passport authentication. | The two ways are URL authorization and File authorization. |
