> This terminology implies that the two concepts, authentication and authorization, are more closely related than they are. But they are closely related. You c

> This terminology implies that the two concepts, authentication and authorization, are more closely related than they are. But they are closely related. You can't really have authorization without some form of authentication. Both are tied to some kind of identity. And in some cases, such as SSO, authentication involves authorization from another system. Also, login is not a good replacement for authentication, because there are forms of authentication that don't involve logging in at all. And often the act of logging in just exchanges one set of authentication credentials (username and password or equivalent) for another, shorter lived, set (token, cookie, etc.) Finally, one nice property of using authz and authn is that you can use "auth" to mean "authentication and authorization", since the two often go together.