Are you talking about Auth with and N or a Z?
summary
Defines AuthN vs AuthZ by concrete claims: authentication is identity, authorization is permitted actions; shows historical roots, lists concrete tech—passwords, biometrics, PKI, tokens, NFC—and protocol names SAML and OAuth2 and SSO. Recommends choosing an authentication method, an identity provider, then layering authorization (RBAC, ABAC, relationship/policy-based), writing fine‑ or coarse‑grained policies, encrypting everything. Argues standard enterprise tools interoperate well, open source gives more pairing options, and multilayer MFA and policy engines are the path toward practical zero trust.
AI-written summary · about
related talks
39mTesting authentication and authorization (AuthN & AuthZ): it’s more than just a login form
09mThe difference between authentication and authorization
29mAuthz as a dev workflow
26mBehind the CNCF IAM Whitepaper: AuthN & AuthZ in Cloud Native Systems
25mRisk-based authentication and zero trust architecture ZTA
25mThe Root of Auth Thingz
27mFrom AuthN to AuthZ: The Future of Identity
31mAuthentication/Authorization Starters Battle