NET Core authentication and Authorization

The process is fairly simple; users input their credentials on the website’s login form . That information is then sent to the authentication server where the information is compared with all the user credentials on file. When a match is found, the system will authenticate users and grant them access to their accounts.

Authorization refers to the process that determines what a user is able to do . For example, an administrative user is allowed to create a document library, add documents, edit documents, and delete them. A non-administrative user working with the library is only authorized to read the documents.

ASP.NET Identity uses OWIN Authentication for log-in/log-out of users in the web site . This means that instead of using FormsAuthentication to generate the cookie, the application uses OWIN CookieAuthentication to do that.

Create a Web app with authentication