J.P. Morgan Interview Question

Describe authentication and authorization and how did you configure it