Authentication - who are you Authenticate - Identity Confirmed --> Grant Access -Identity Not confirmed --> Reject / 401 (Unauthorization) Basic Auth Methods - 1. Basic -2. Api keys -3. Session Basic - Authorization: Basic (credentials (username:password) - base64 encoded) Digest Authentication - username:password with md5 encription ------------------------------------------------------------ Authorization - if you can access or perform the task - authorize to do it ----------------------------------------------------------- SAML - Security Assertion Markup Language (XML based framework for exchanging data between two system for Authentication and Authorization through - SSO, OIDC WS-F Key Component of SAML - 1. Service Provider 2. Identity Provider Identity Provider (IdP):- popular p...