Hacker News new | ask | show | jobs
by qwantim1 1957 days ago
It’s a great idea, but your company is going to be a serious target. You not only will have the ability to control authN, but you’ll own authR also if you’re managing users and groups. You’ll also own all the conference rooms, printers, servers, etc., since you’ll be hosting Active Directory for the Windows folk... at least that’s how I’d understand user management for auth.
1 comments

Is authR another way to say authZ? I've never heard of authR and a quick google seems to mostly show a cloudflare project and stuff related to the term "author".
I think authN is Authentication and authR is authorisation. Two related but slightly different concepts. The third of the trio is Accounting which completes the AAA, the family of protocols that mediate access on the internet [0]

[0]: https://en.wikipedia.org/wiki/AAA_(computer_security)

edit: added reference and context for completion.

I took it to mean authz. Never seen authR before either.
It seems to be the new way to say it. I've known both as AuthN and AuthZ but AuthR picked up for some reason or another.

In the same vein, it seems like a lot of people aren't too aware of the "identity" space so there's a whole lot of re-inventing the wheel with external sources not realizing something already exists.