An external authorization service is a standalone system (like Oso Cloud or OPA) that handles access decisions. Tools such as Envoy can integrate with external auth filters to forward requests for centralized policy evaluation.