Rules are executed during authentication only (when a post login action would execute) and will apply to new users created/authenticating for the first time as well as existing users.
Both rules and actions are available for federated/social connections at login, but not pre or post user registration in the case of actions.