Authentication is the process of identifying users. Authentication is identifying/validating the user against the credentials (username and password).

Authorization performs after authentication. Authorization is the process of granting access to those users based on identity. Authorization allowing access of specific resource to user.