Configuring authentication and authorization for an OpenSearch cluster is often named as one of the bigger challenges in setup. However, by keeping a few key points in mind, you can avoid many issues and make the configuration process less stressful. We will walk through the important aspects.

The Model Context Protocol now fully embraces OAuth 2.1 conventions, bringing mature authorization patterns to AI agent ecosystems. Rather than inventing new auth mechanisms, MCP adopted proven OAuth flows, dynamic client registration, as well as the brand-new Protected Resource Metadata conventions. This session explores how the new spec significantly simplifies the developer experience for both MCP client and server implementers, as well as gives developers more flexibility around integration with existing authorization servers.

We will share Criteo's journey of integrating authentication and authorisation into our Kafka infrastructure, including how we incorporated OAuth and JWT authentication systems into Kafka to enhance the security of our data streams. The talk covers the obstacles we faced and the lessons learned during transforming an open Kafka infra into a safeguarded platform.