User authentication provides a way to identify users while user authorization provides a way to control what a user can and cannot do within an application based on their identity.