It's the difference between a user ID (be it a small integer or a long string) and actually authenticating to perform actions AS said user.

SSN as a user identifier - to uniquely describe an entity

Actual PKI including a secure public/private key with a signature from a trusted agent (like a government ID authority), and maybe also web-of-trust signatures? THAT is what is required to securely sign things.