Meaning in graphics work
Authentication checks a presented identity or credential through a defined trust mechanism. It allows a service to establish which principal is making a request within that context.
It differs from authorisation, which decides what that principal may do. Entering a reviewer name in a browser form does not create verified identity.
Example and practical consequence
A user signing in through the commissioned identity provider may gain a recognised account, but still need current organisation membership and a project grant before accessing private artwork.
Keep identity-provider responses and sessions securely validated in the actual engine. Distinguish successful sign-in from record access and approval authority. Public planning tools can remain useful without an account, while private persistence needs real authentication; a visual sign-in mock-up or self-entered local note must not be represented as that verified process.
Take it to the next job
- Separate verified identity from permission to access or approve records.
