Building Modern Authorization - A Practical Guide to Centralized, Distributed, and Hybrid Stacks

Explore practical implementation strategies for modern authorization systems in this 41-minute conference talk from the Linux Foundation. Discover how to map conceptual authorization building blocks to the cloud-native open source ecosystem, examining leading tools for each component including Policy Decision Points (PDP) like OPA and OpenFGA, Policy Information Points (PIP) like Keycloak, Policy Enforcement Points (PEP) like Envoy and NGINX, and Policy Administration Points (PAP) like OPAL. Learn to combine these tools into practical "tool stacks" for implementing centralized, distributed, and hybrid authorization patterns. Gain actionable insights for choosing, building, and deploying the right authorization stack for your specific project requirements, moving beyond theoretical concepts to hands-on implementation guidance that addresses the common developer question of "How do I build this, and which tools should I use?"