Cerbos authorization for SecureAuth
SecureAuth provides adaptive authentication with risk-based MFA and continuous identity assurance. Cerbos uses SecureAuth's identity attributes and risk signals to evaluate fine-grained authorization policies, bringing risk-aware access control into your applications.
Risk-aware policies
Factor SecureAuth's adaptive authentication signals and risk context into Cerbos authorization decisions
Assurance-level access
Write policies that consider authentication strength and session risk alongside user roles and resource attributes
Adaptive + fine-grained
SecureAuth adapts authentication to risk. Cerbos adapts authorization to context. Together they provide layered access control.
How Cerbos works with SecureAuth
SecureAuth handles authentication, confirming who a user is. Cerbos handles authorization, deciding what that user can do. Together they give you a complete access control stack without coupling identity logic to business rules.
Cerbos lets you write fine-grained, context-aware authorization policies in human-readable YAML. Policies are decoupled from application code so product and security teams can update permissions without a release cycle.
Because Cerbos runs as a stateless Policy Decision Point (PDP) next to your application, authorization checks are sub-millisecond and scale horizontally with your infrastructure.
How Cerbos works with SecureAuth
- Users authenticate via SecureAuth, SecureAuth handles login with adaptive authentication, evaluating risk factors such as device posture, location, and behavioral patterns to determine MFA requirements.
- Extract identity from the SecureAuth token, Your application validates the SecureAuth-issued token and extracts the user's roles, group memberships, and any authentication context such as assurance level.
- Send identity and resource context to Cerbos, Pass the SecureAuth user attributes as principal attributes alongside the target resource and desired action to the Cerbos PDP.
- Cerbos evaluates policies and returns a decision, Cerbos evaluates your YAML policies against the SecureAuth identity data and resource attributes, returning allow or deny. Your application enforces the result.
FAQ
How does Cerbos work with SecureAuth?
SecureAuth authenticates users with adaptive, risk-based methods and provides identity attributes including roles, group memberships, and authentication context. Cerbos receives these attributes and evaluates them against your authorization policies to make fine-grained, resource-level access decisions.
Can Cerbos use SecureAuth's risk signals in authorization policies?
Yes. SecureAuth evaluates risk based on device posture, location, and user behavior. If your application passes these risk signals to Cerbos as principal or context attributes, your policies can factor authentication assurance level into access decisions, for example restricting sensitive operations to low-risk sessions.
Does Cerbos replace SecureAuth's access controls?
No. SecureAuth controls authentication strength and step-up MFA based on risk. Cerbos controls what authenticated users can do within your applications. SecureAuth determines how confidently a user is authenticated. Cerbos determines what resources they can access.
Learn more about Cerbos
Related integrations
View all integrations →
Cerbos + SecureAuth
- Cerbos extends SecureAuth roles with fine-grained, attribute-based permissions
- Policies defined in human-readable YAML, managed as code
- Authorization logic decoupled from application code
- Sub-millisecond policy evaluation via stateless PDP
Authorization for AI systems
By industry
By business requirement
Useful links
What is Cerbos?
Cerbos is an end-to-end enterprise authorization software for Zero Trust environments and AI-powered systems. It enforces fine-grained, contextual, and continuous authorization across apps, APIs, AI agents, MCP servers, services, and workloads.
Cerbos consists of an open-source Policy Decision Point, Enforcement Point integrations, and a centrally managed Policy Administration Plane (Cerbos Hub) that coordinates unified policy-based authorization across your architecture. Enforce least privilege & maintain full visibility into access decisions with Cerbos authorization.