How is authentication different from authorization?
Last reviewed 5 Sept 2026 · Review due 5 Mar 2027
Short answer
Authentication establishes who or what is presenting a proof. Authorization decides whether that authenticated party may perform a specific action. Keyra workflows may use hardware-verified authentication as an input to authorization, but a successful authentication does not automatically authorize payments or privileged operations.
How it works
Typical sequence: authenticate using hardware-backed proof, evaluate policy and consent, then issue an authorization decision that may be transaction-bound.
Limitations & conditions
- A verified mobile number alone does not authorize financial transactions.
- Delegated AI-agent authority requires separate scope and revocation controls.
Evidence
Standards education — authentication vs authorization
standards education · effective 2026-09-05 · retrieved 2026-09-05
Public referencekeyra.ie public corporate site
public corroboration · effective 2026-09-05 · retrieved 2026-09-05
Public reference