The process of verifying the user is who they purport to be.

Compare with authorization, which is the process of verifying what data the user may access.