What is Authentication
Verification of user or system identity
Authentication
Authentication — the process of verifying the identity of a user or system before granting access to resources.
Authentication Factors
| Factor | Description | Examples | |--------|-------------|----------| | Knowledge | What user knows | Password, PIN | | Possession | What user has | Phone, token | | Biometric | Who user is | Fingerprint, face |
Authentication Methods
- Password — basic method
- MFA (Multi-Factor) — multiple factors
- SSO (Single Sign-On) — one login for many services
- OAuth / OIDC — delegated authorization
- Biometrics — fingerprints, facial recognition
- Passwordless — no passwords (WebAuthn)
Authentication vs Authorization
| Authentication | Authorization | |----------------|---------------| | Who are you? | What are you allowed? | | Identity verification | Permission check | | First step | Second step |
Modern Standards
- JWT — tokens for API
- SAML — enterprise SSO
- OAuth 2.0 — app authorization
- FIDO2/WebAuthn — passwordless
Threats and Protection
- Brute force → rate limiting
- Phishing → MFA
- Session hijacking → secure cookies
- Credential stuffing → breach detection