Authentication confirms that you are who you say you are (a password, a fingerprint, a verification code); authorization decides what you can do once you're in (view, edit, approve). A secure system needs both: signing in with a verified identity and doing only what your role allows.
Related term in this glossary: IAM (identity and access management)
authentication, authorization, authn vs authz, identity verification, access permissions