<div dir="ltr"><div><br># Meeting Notes 2024-11-26<br><br>## Attendees<br>Gerry Gebel<br>Alex Babeanu<br>Vladi Berger<br>Julio Auto De Medeiros<br>David Hyland<br>Omri Gazitt<br>Michiel Trimpe<br>Roland Baum<br>Victor Lu<br>Alex Olivier<br>David Brossard<br>Eve Maler<br>George Fletcher<br><br>## Agenda<br>- KubeCon update (Omri)<br>- Procedures and process <br>    - HackMD replacement?<br>    - Do we need to change meeting times?<br>- Roadmap for spec in 2025<br>    -  Naming format for specs to accommodate future enhancements<br>        - Implementer's Draft 01 = Evaluation<br>        - Implementer's Draft 02 = Evaluations and Discovery<br>        - Implementer's Draft 03 = Search (list and predicates)<br>    - When should we go for a vote on final spec?<br>- Review Search API proposal (Vlad)<br>- Update on outreach <a href="https://hackmd.io/@oidf-wg-authzen/target-integrations">https://hackmd.io/@oidf-wg-authzen/target-integrations</a><br><br>## Notes<br>- KubeCon<br>    - Several other authZ vendors in attendance (Aserto, Cerbos, Oso, Permit.io)<br>    - multiple talks on authz<br>    - 200+ showed up for Omri's talk on AuthZEN - about 20+ people came up after the talk to ask questions<br>    - Attendees were more aware of authN than authZ. CNCF more familiar with OPA and OpenFGA<br>    - ??How to get date to the authZ engine?<br>    - Strong interest in the search work being done here<br><br>- OIDF process<br>    - Some issues were raised by OIDF but most likely based on misunderstandings<br>        - An issue was posted during review period that we missed<br>        - Also a misunderstanding on our part of what could be changed during that time period<br>        - Co-chairs will review any outstanding issues before bringing items to the broader group<br>    - HackMD usage<br>        - OIDF rules state that agenda and meeting notes should be published to email list<br>        - Can the OIDF's rules on IP be enforced if we use HackMD?<br><br>- Roadmap for 2025<br>    - Getting to final specification<br>    - Will need to engage with OIDF on certification<br>    - Evaluation<br>    - Evaluations and Discovery<br>    - Search<br>    - Getting events to PDPs<br>    - Options<br>        - Final spec of Evaluation<br>        - Update Evaluations to include Discovery<br>        - Include Search in a final spec<br><br>- Discussion of outreach<br>    - We must undertake this effort to get more in the industry on the AuthZEN bandwagon<br>    - Updating and maintaining design patterns document will be very beneficial to educate the industry<br>    - It's best when outside groups create a profile for AuthZEN, rather than having this working group initiate that effort<br><br>## Action items<br>- Contact Mike L regarding HackMD usage and potential IPR issues. </div><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><table style="color:rgb(34,34,34);font-family:tahoma,sans-serif;border:none;border-collapse:collapse"><tbody><tr style="height:0pt"><td style="vertical-align:top;padding:5pt;overflow:hidden"><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><a href="http://www.aserto.com/" target="_blank"><img src="https://raw.githubusercontent.com/aserto-dev/artwork/main/logo/horizontal/color/aserto-horizontal-color.png" width="96" height="35"></a></p></td><td style="vertical-align:middle;padding:5pt;overflow:hidden"><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="font-family:Roboto,sans-serif;color:rgb(0,0,0);background-color:transparent;font-weight:700;vertical-align:baseline;white-space:pre-wrap"><span style="font-size:10pt">Omri Gazitt</span><span style="font-weight:normal"><span style="font-family:Arial;background-color:transparent;vertical-align:baseline"><span style="white-space:pre">   </span></span></span><span style="font-size:10pt">| </span></span><span style="background-color:transparent;color:rgb(0,0,0);font-family:Roboto,sans-serif;font-size:10pt;white-space:pre-wrap">CEO</span></p><p dir="ltr" style="line-height:1.2;margin-top:0pt;margin-bottom:0pt"><span style="font-size:10pt;font-family:Roboto,sans-serif;color:rgb(0,0,0);background-color:transparent;vertical-align:baseline;white-space:pre-wrap"><a href="http://www.aserto.com/" target="_blank">Aserto</a> Inc.</span><span style="background-color:transparent;font-family:Arial;vertical-align:baseline"><span style="white-space:pre">  </span></span><span style="color:rgb(0,0,0);font-family:Roboto,sans-serif;font-weight:700;white-space:pre-wrap;font-size:10pt">| </span><span style="background-color:transparent;color:rgb(0,0,0);font-family:Roboto,sans-serif;font-size:10pt;white-space:pre-wrap">(425) 765-0079</span></p></td></tr></tbody></table></div></div></div>