Authentication is the process of validating users based on their identity. Authorization is the method by which a network device assembles a set of attributes that regulates what tasks the user is authorized to perform. The ASA supports authorization and accounting attributes. A requesting entity such as AUA, KUA connects to the CIDR through an ASA.