The CBA authentication method identifies users before granting them access to resources. Authorization defines what level of access a user receives after approval.