Toby Allen

Toby Allen

Solutions Engineer at Okta. I write about identity, access management, and security. This site archives my published articles, talks, and presentations.

Latest

Acting on behalf of: separating the actor from the account in modern identity

· Auth0, Customer Identity Products, Auth0 FGA

Identity systems are very good at answering one question: who are you? What they are less good at is the follow-up: and who are you acting for? In this post I will look at why separating the authenticated user from the account or person they are acting within is important, what it enables across a range of industries, and how Auth0 and Auth0 FGA address the two complementary sides of the problem.