Tech blog
Demos, implementation guides, product updates and broader takes on authorization, identity and security.
Cerbos Hub - July Product Updates
Cerbos Hub July updates: GA launch, selective policy compilation for embedded PDP, detailed build error feedback, new Playground templates, and user profile management. Enhance your authorization systems with self-contained policy bundles and streamline policy creation. Learn more about these updates in our latest blog post.
Navigating authentication and authorization: Harnessing the power of Microsoft Entra External ID and Cerbos for enhanced application security
Discover how to integrate Microsoft Entra External ID with Cerbos for robust web application security. This guide covers setup, user flows, permissions, and fine-grained authorization to enhance authentication and authorization practices, essential for developers aiming to build secure and scalable applications. Read our detailed tutorial now.
Cerbos PDP v0.37.0 Release Highlights: REPL autocomplete, Kubernetes DaemonSet and more
The v0.37 release of Cerbos PDP adds support for autocomplete when using the Cerbos REPL, new Kubernetes deployment options and updates to the AdminAPI.
How to use Cerbos in Docker Compose (PDP + Hub)
In this blog, you will learn what Cerbos is, how Cerbos works and its main components. The blog will take you through a hands-on demonstration that will ensure you get an accelerated understanding of how to use Cerbos in a Docker environment as well as within the provided Hub.
Using Cerbos with Keycloak for Identity/AuthN
In this tutorial, we'll use Keycloak for authentication and then implement Cerbos for fine-grained access control, all within a Django web application, though the same principle will work for any application. As a result we will ensure that only authenticated users can access certain parts of the application, and their actions are authorized with precision.
Cerbos v0.36.0 Release Highlights: Technical Enhancements and Developer Features
Cerbos v0.36.0 enhances the efficiency and functionality of policy-driven access controls. This version introduces asynchronous audit logging, refined Kafka backend handling, and new administrative commands, all designed to optimize performance and scalability.
Streamlining Application Security Updates with @cerbos/embedded AutoUpdatingLoader feature
Cerbos has added support for AutoUpdatingLoader to the `@cerbos/embedded` SDK, which facilitates real-time policy updates on the client without requiring a full reload, disrupting the ongoing user experience.
What the heck is a principal?
And why we built Cerbos the way we did.
What's so bad about sidecars, anyway?
Explore the benefits and limitations of using the sidecar design pattern and the specific use cases where it is most appropriate. Learn how to determine whether a sidecar is a suitable choice for a particular scenario, as well as how to implement sidecars to maximize their benefits.
Importance of authorization in transition from monolithic to microservices architecture
Explore how Cerbos enhances security in microservices architectures, transitioning from monolithic systems. This article discusses the necessity of robust, scalable authorization in distributed environments, emphasizing zero-trust principles and Cerbos's flexible, developer-friendly access control solutions.
Implementing Cerbos in a Spring Boot Application
In this tutorial, you’ll learn about authorization, how it works, and how to use Cerbos to integrate authorization into a Spring Boot application.
A complete guide to Next.js authorization
In this tutorial, we’ll learn about authorization, how it works, and how to integrate it into a Next.js application using Cerbos, an open-source authorization project. This approach will allow us to seamlessly manage and enforce access controls within our web application.
Recommended content
Mapping business requirements to authorization policy
eBook: Zero Trust for AI, securing MCP servers
Experiment, learn, and prototype with Cerbos Playground
eBook: How to adopt externalized authorization
Framework for evaluating authorization providers and solutions
