Whatever the terms we use are we should definitely have 2 distinct terms to describe the process of proving you are who you claim to be and the process of deter

Whatever the terms we use are we should definitely have 2 distinct terms to describe the process of proving you are who you claim to be and the process of determining what you can do once logged into the application. All two many developers and engineering leaders lump both concepts together as “auth” and falsely assume that both can be handled by their SSO service/ using a jwt.