What it means
Authentication is the process of verifying who a user or system is, for example through a password, a smartcard, a one-time code or an electronic ID. It answers the question "Are you who you claim to be?"
Real-world example
Before using an online service to apply for a residence certificate, a citizen proves their identity with the online ID function of their national identity card. The service now knows who is making the request. Whether this person is allowed to see a particular record is a separate question.
Why it matters for AI adoption
AI assistants that access internal systems or personal data must know who is using them. Weak authentication can let unauthorised people query sensitive information through a chat interface, which can be harder to monitor than traditional applications.
Often confused with
Authentication confirms who someone is. Authorisation decides what that person is allowed to see or do. A system can authenticate a user correctly and still expose data if authorisation is not enforced.
Questions to ask
- How does the AI system verify the identity of users and of other systems it connects to?
- Does it use our existing identity and login infrastructure?