You would be the one overcomplicating the matter by clumping these distinct concepts together. Edit: For those unfamiliar with the concepts: Authentication:

You would be the one overcomplicating the matter by clumping these distinct concepts together. Edit: For those unfamiliar with the concepts: Authentication: subject identity - is the user who they claim to be? Authorization: subject permissions - is this user permitted to execute that action?