A process through which a user's identity is verified before granting access to a system or resource.