The process of verifying that a user is who they claim to be before granting access to a system or resource.