So many tools and libraries combine authorization and authentication, and it’s hard to find an authorization server that lets you outsource identity.

(All too often the underspecified abbreviation “auth” is used to cover both.)

Shameless plug: My colleagues and I implemented a minimal authorization server that lets you leverage a trusted identity provider of your choice (like Entra ID or even Auth0/Okta) and handle authorization. It looks up what roles and permissions the identified user should be able to have/grant and issues tokens containing that authorization.

https://github.com/DMGT-TECH/the-usher-server

Nice! If it works with Authelia (or Authentik) too then I'm sold. Thanks for sharing.