In Search For a Perfect Access Control System
The historical origins of authorization schemes. Hints at the future of sharing, trust and delegation between different teams and organizations.
- from
- IAM
- added
- 2026-10-10
- likes
- 0
similar
-
Authorization Academy osohq.com
An in-depth, vendor-agnostic treatment of authorization that emphasizes mental models. This guide shows the reader how to think about their authorization needs in order to make good decisions about their authorization architecture and model.
-
A Child's Garden of Inter-Service Authentication Schemes web.archive.org
In the same spirit as above, but this time at the service level.
-
Open Policy Agent github.com
🆓 An open-source general-purpose decision engine to create and enforce ABAC policies.
-
SAML vs. OAuth web.archive.org
“OAuth is a protocol for authorization: it ensures Bob goes to the right parking lot. In contrast, SAML is a protocol for authentication, or allowing Bob to get past the guardhouse.”
-
ActionPolicy github.com
A tool to handle authorization. :red_circle:
-
Why Authorization is Hard osohq.com
Because it needs multiple tradeoffs on Enforcement which is required in so many places, on Decision architecture to split business logic from authorization logic, and on Modeling to balance power and complexity.
IAM › Authorization > Policy models: “The historical origins of authorization schemes. Hints at the future of sharing, trust and delegation between different teams and organizations.”