Authentication verifies who a user/service is, while authorization identifies what type of access the user/service in question has been granted. To better understand the difference between authentication vs authorization in microservices, consider an API call. The microservice making the request needs to be authenticated first to confirm its identity. Then, it’s necessary to determine if it’s authorized to do what it’s asking.