Authentication

This brings us to the architectural holy grail of modern cloud security.

Decoupling authentication, which is authN, from authorization, which is authC, across cloud boundaries.

Let's clearly define the roles in this decoupled architecture.

Because historically, AuthN and AuthC were bundled together in Active Directory, right? You proved who you were, and the exact same server checked what groups you were in.