OpenID Foundation AuthZEN Working Group Announces Interop Results
LAS VEGAS, NV/IDENTIVERSE - May 28, 2023 - The OpenID Foundation AuthZEN Working Group announced today that leading authorization vendors successfully achieved conformance with the AuthZEN request/response protocol, a significant step in bringing interoperability and standardization to the authorization market. The industry leaders include 3Edges, Aserto, Axiomatics, Cerbos, Permit.io, Rock Solid Knowledge, SGNL.ai, Strata Identity and Thales, demonstrating their commitment to documenting common authorization patterns, defining standard mechanisms for communication between authorization components, and recommending best practices for developing secure applications.
Established through the OpenID Foundation, the AuthZEN Working Group’s focus is to tackle the complexities of authorization, to promote decoupling and externalizing authorization logic from applications, and to simplify the implementation of a robust authorization layer that can be edited and audited with ease within diverse application environments. With members from leading authorization vendors, the group aims to unify and standardize the way authorization decisions are enforced across varying platforms, with an initial focus on a specification that ensures interoperability and integration between policy enforcement points and decision points. This initiative draws on the expertise of leading companies in the security and authorization space, fostering a collaborative approach to enhancing the scalability and security of access control systems.
The working group recently completed successful interoperability testing, which included a defined interop scenario in the form of a Todo application. Participating companies including 3Edges, Aserto, Axiomatics, Cerbos, Permit.io, Rock Solid Knowledge, SGNL.ai, Strata Identity and Thales achieved success in this testing.
