This document discusses authentication and authorization for web applications. It introduces AuthExperience as a set of sessions that takes participants from theory to practice on these topics. The sessions are designed as walkthroughs that explain authentication fundamentals, methods and standards, and authentication and authorization processes. The goal is to help participants understand identity and access management and prepare for developing distributed systems that require authentication and authorization.

1. AuthExperience
web apps Authentication and
authorization

2. Who we are ? - Full Stack !
Backend
Promotions only work as
well as the marketing.
DevOps
Kubernetes, SRE, I.A.C
Frontend
React, Node.js
Mobile
Android, Cross Platform

3. OPS
Operations Background
CM/CI/CD
~10 years practicing CI/CD
Docker Swarm
Making CI flexible
KubeExperience
This is literally all I do 70%
of the time ;)
Group & Tech Lead
12+ years @
Configuration Management
Continuous Integration
Continuous Delivery & Deployment
Kubernetes
Monitoring
2008
Haggai Philip
Zagury
AuthExperience
This is literally all I do 70%
of the time ;)

4. What
What is it ?
Why
Do you need it ?
Today’s Goals
Explain how we think you should prepare
yourselves for the era of distributed
systems development, Authentication &
Authorization
How
Methodology

5. Why do we
authexperience? Why
Do we do it ?
The why!

6. Why ?
Why do we care bout authentication & authorization
Authentication
Every service nowadays requires some form of authentication.
Internet & Standards have emerged such as
As Developers Every application nowadays needs to support some form of authentication to
identify, and authorization - what the user can do once logged in.
As Consumers we use apps every day the process of auth is sometimes obscure and magically
works …

7. Why ?
Why do we care bout authentication & authorization
Authorization
Who has access to what resource
To our Data
Compliance GDPR + HIPPA and others which are much more common than they used to

8. Why call it that ?
What
Is Kubexperience ?
authexperience !

9. What
What do we Auth about ?
Review the fundamentals of Identity and Access Management (understand
why there is so much confusion on the topic …)
Understand IAM
User Directories
Authentication methods and standards & Identification flows
Authentication and Authorization processes
Operation and Maintenance aspects

10. How do we (you ?)
authexperience
The How !
How
Methodology

11. Theory
Learn what you are
building
Practice
Do it together
Conclusion
Align -> best practice
solution
Hands-On
Authexperience is a set os session designed
as walkthroughs, taking you from Theory to
Practice something you can take with you at
the end to your playground.