[Openid-specs-authzen] Search API interop with entitlement/access management solutions

[Alex Babeanu]

That is an interesting question: can one claim AuthZen compliance if they
only support Search and no evals?
Besides Michiel, assuming Veza and Axionus don't support partial
evaluations either, do they?
Finally, Searching for a user's Entitlements is different than that
user themselves searching for resources...

Cheers,

./\lex.


On Tue, Apr 1, 2025 at 12:20 PM Michiel Trimpe via Openid-specs-authzen <
openid-specs-authzen at lists.openid.net> wrote:

> Hi all,
>
> I didn't want to raise this near the end of today's call; but going around
> the booths at Gartner IAM it seemed like the AuthZEN Search APIs were also
> a natural fit for products like Axonius and Veza which analyze and evaluate
> entitlements and access rights.
>
> When I asked them for demonstrations of their functionality related to
> authorization they both showed what were, functionally speaking, just
> Search API's frontends on top of a Subject-Action-Resource
> entitlement/access graph.
>
> Is this something that is also considered as a possible angle for AuthZEN
> compliance/interop? I.e. products which consume or provide Search API's
> without necessarily supporting Evaluations?
>
> Kind regards, Met vriendelijke groet,
>
>
>
> *Michiel Trimpe*
>
> Solution architect Federatieve Toegangsverlening
> <https://federatieve-toegangsverlening-digilab-overheid-n-5d4b9badc9bcfa.gitlab.io/>
>
> 06-41482341
>
>
>
> *VNG Realisatie*
>
> Nassaulaan 12
>
> 2514 JS Den Haag
>
> www.vngrealisatie.nl
>
> --
> Openid-specs-authzen mailing list
> Openid-specs-authzen at lists.openid.net
> https://lists.openid.net/mailman/listinfo/openid-specs-authzen
>


-- 


Alex Babeanu
Lead Product Manager, Access Management



t. +1 604 728 8130
e. alex.babeanu at indykite.com
w. www.indykite.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-authzen/attachments/20250402/69a6ee14/attachment-0001.htm>