The authorization framework in .NET provides a solid and simplified structure to the most complex use-cases. After a brief review of the infrastructure supporting the authorization by policy, we will explore some interesting advanced scenarios like the step-up authentication and claim transformation. We will also examine the support for simplified parameterized authorization policies coming in .NET 8. During the session, we will use different authentication methods, including Keycloak, in order to better understand how to correctly map the token claims.