[Openid-specs-authzen] Search API interop with entitlement/access management solutions

David Brossard david.brossard at gmail.com
Wed Apr 2 13:34:56 UTC 2025


Hi Michiel, all,

I think the short answer is yes, let's reach out and talk to the likes of
Veza and Axonius - we could also include Sailpoint and Saviynt. I don't
know whether their model fits ours but they can definitely:

   - inform our APIs
   - broaden the scope of applicability

I know one person at Sailpoint (Mike Kiser, part of OpenID SSF) whom we can
rope into AuthZEN but I don't know the other companies so we need to find
names. We probably need to put together messaging for this category of
companies to get their attention too. Are you happy to take the lead on
this?

Thanks,
David

On Tue, Apr 1, 2025 at 12:20 PM Michiel Trimpe via Openid-specs-authzen <
openid-specs-authzen at lists.openid.net> wrote:

> Hi all,
>
> I didn't want to raise this near the end of today's call; but going around
> the booths at Gartner IAM it seemed like the AuthZEN Search APIs were also
> a natural fit for products like Axonius and Veza which analyze and evaluate
> entitlements and access rights.
>
> When I asked them for demonstrations of their functionality related to
> authorization they both showed what were, functionally speaking, just
> Search API's frontends on top of a Subject-Action-Resource
> entitlement/access graph.
>
> Is this something that is also considered as a possible angle for AuthZEN
> compliance/interop? I.e. products which consume or provide Search API's
> without necessarily supporting Evaluations?
>
> Kind regards, Met vriendelijke groet,
>
>
>
> *Michiel Trimpe*
>
> Solution architect Federatieve Toegangsverlening
> <https://federatieve-toegangsverlening-digilab-overheid-n-5d4b9badc9bcfa.gitlab.io/>
>
> 06-41482341
>
>
>
> *VNG Realisatie*
>
> Nassaulaan 12
>
> 2514 JS Den Haag
>
> www.vngrealisatie.nl
>
> --
> Openid-specs-authzen mailing list
> Openid-specs-authzen at lists.openid.net
> https://lists.openid.net/mailman/listinfo/openid-specs-authzen
>


-- 
---
David Brossard
http://www.linkedin.com/in/davidbrossard
http://twitter.com/davidjbrossard
http://about.me/brossard
---
Stay safe on the Internet: IC3 Prevention Tips
<https://www.capefearnetworks.com/wp-content/uploads/2017/05/Internet-Fraud-Prevention-Tips-IC3.pdf>
Prenez vos précautions sur Internet:
https://cyber.gouv.fr/bonnes-pratiques-protegez-vous
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-authzen/attachments/20250402/79a08bea/attachment.htm>


More information about the Openid-specs-authzen mailing list