Pomerium is an identity-aware proxy that enables secure access to internal applications. OPA implements authorization under the hood.