From OpenID Connect to OpenID AuthZEN
summary
Overview of modern access-control models and standards: explains RBAC, ABAC, and ReBAC and compares policy languages and systems such as Rego, XACML, Google Zanzibar, CEDAR, and OAuth RAR. Describes the OpenID Foundation’s new AuthZEN working group aiming to enable interoperability between these access-control standards.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:10OpenID Connect evolution
- 2:59Access control definition
- 4:42Centralized access control
- 6:53Existing authorization models
- 10:40Cedar model example
- 12:05OpenID AuthZEN standardization
- 13:52OpenID AuthZEN API
- 14:15Conclusion
related talks
29mAuthz as a dev workflow
30mAuthZEN in Practice: Standardizing Authorization for Cloud Native Platforms and Agents
16mAccess Granted with AuthZed
05mAre you talking about Auth with and N or a Z?
32mImplementing Authorization
27mI Can RBAC, and So Can You!
24mExpanding beyond authentication with emerging authorization standards
30mYour Cheat Code for API Authorization