User Authentication and Authorisation

Services that users wish to access should be secure with clear user separation. The separate issues of user authentication, whether the user is who they claim to be, and user authorisation, whether the user is allowed to make use of the resources, are commonly linked together under the banner of Authentication and Authorisation (often abbreviated as Authn & Authz). There are several methods that can be used to achieve this.

• GSI
• Shibboleth