Authentication is simply identifying a user.

Authorization is securing access to assets.

You can find a lot of reading about this if the distinction is confusing.