Building a Google-like IAM system from scratch through Ory products
summary
Animeshon builds a Google-like IAM using Ory Hydra for service accounts, Ory Kratos for users, an open-source graph RBAC called gRBAC, and a custom identity-aware proxy. Authorization uses a shortest-path graph query over bindings; caching session tokens 10s and permission results 3s drops proxy latency from ~80–100ms to ~20ms P99 (avg 3–10ms). The proxy handles both REST and gRPC; gRBAC runs on a graph DB and returns allow/deny quickly.
AI-written summary · about
chapters (8)
- 0:00Introduction and context
- 1:14Core access control concepts
- 6:25Authentication with Hydra
- 8:04User management with Kratos
- 8:44Graph-based access control
- 11:55Identity proxy implementation
- 13:50Latency and caching strategy
- 16:01Conclusion and Q&A
related talks
25m Introducing the Ory Network
18mMake Auth great again with Ory
16mHow to move your RBAC into Ory 
40mHow Google Built a Consistent, Global Authorization System with Zanzibar
29mHow Google Built a Consistent, Global Authorization System with Zanzibar
42mEnterprise Architecture Beyond the Perimeter
30mSecure Your Prototypes with OAuth2-Proxy and Anubis
18mRunning Ory on a 30M users platform