Beyond Username and Password — The Many Faces of Identity

Identity defines who or what. Credentials prove it.
Authorization enforces it.