is the process of verifying the This is something that needs to be identified and authenticated. An identity is typically a user who has login information in the form of a username and password. However, they can also be applications and services. of a person or service trying to access a resource. It involves obtaining the correct credentials from a party and forms the basis for creating a security principal for identity and access control. This checks whether it is really about the respective person.