[Openid-specs-fastfed] Introduction and some questions!!

[Monika Avalur]

Hi,

I am Monika Avalur working as a product manager in IAM space in CyberArk. I have been assigned to this working group and have been going through the specs for FastFed.

Firstly I love FastFed as I am able to echo the pain in setting up federation with all that Schema mapping.

I have couple of questions/suggestion/use cases I see today that I would want to share with this group to check if we are doing anything in those terms.


  1.
Extending SCIM to sync any generic entities. i.e., today only users and groups can be provisioned using SCIM. Is there any plan to make this generic enough such that say certain app/device/AI agent/Org metadata can be provisioned or this data can be generically exchanged between two entities? This can extend to AI agents, machine identities etc.,
  2.
I don't see this particular draft talking about federation of machine identities, could be workload identities/AI agents/service users etc., In this case we mostly use STS/OAuth client creds/MTLS based authentication. So do we plan on supporting them as well?

Thanks & Regards,
Monika


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-fastfed/attachments/20250626/3563b323/attachment.htm>