In microservices architecture best practices, identity authentication and authorization should be handled uniformly by a dedicated service as a cross-cutting concern, rather than being implemented independently by each business service.