OpenID AuthZEN Overview - Gartner IAM 25

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

AuthZEN: The “OpenID Connect”
of Authorization
Gartner IAM Summit Grapevine 2025
Alex Olivier
Co-founder, Cerbos
David Bro...

Agenda
Introduction
Why AuthZEN
What AuthZEN provides
Demo
Homan
Farahmand
Omri Gazitt
David
Brossard
Alex Olivier

State of IAM
• OAuth2, OIDC, SAML, JWT
• Workforce SSO: Okta, Entra, Ping Identity, …
• CIAM: Auth0, Cognito, AAD B2C, …
“...

“n + m” problem
OpenID AuthZEN Vision
• OAuth2, OIDC, SAML, JWT
• Workforce SSO: Okta, Entra, PingID, …
• CIAM: Auth0, Cog...

Modern Authorization
Ecosystems, standards, & OSS
Policy as code (ABAC) Policy as data (ReBAC)
Casbin
TOPAZ
Open Policy Ag...

Business Drivers
Developer
Efficiency
Let developers focus on
business features and
delegate authorization to a
dedicated ...

Gartner Hype Cycle for Digital Identity, 2025
First
mention on
the Hype
Cycle

AuthZEN Charter https://openid.net/wg/authzen/
Policy
Enforcemen
t Externalized
authorization
service that
delivers fine-
...

OpenID AuthZEN Enables Defense-in-Depth
Identity Providers
IdP as Enforcement
(coarse-grained)
API Gateway as PEP
(medium-...

OpenID AuthZEN Architecture
COMPATIBILITY
NIST ABAC 800-162
OWASP API
AI MCP
NIST Zero Trust 800-207
Defense-in-Depth

What’s included in OpenID AuthZEN?
Batch Binary API Search API Discovery API
Binary AuthZ API

AuthZEN Drafts - A History
AuthZEN 1.0 Core:
• /evaluation endpoint: Draft 01 (Implementer’s
Draft – Nov 2024)
• /evaluati...

Binary API Sample Payload
https://openid.github.io/authzen/
Use Cases
● Transactional authorization
● API Access Control
●...

Batch Binary API: Sample Payload
Use Cases
● Same as previous API plus
● Functional access control
● UI access control
● A...

Search API: Sample Payload
Search APIs
● Subject Search
○ Who can view record #1?
● Resource Search
○ Which record can Ali...

Interop History
Initial Interops (June 2024 and later)
● The PDPs get together and prove interoperability with one another...

API Gateways as PEP
Policy Decision Points
(PDP)
Interoperable implementations (Dec. 2025)
TOPAZ
Identity Providers as
PEP

Gartner IAM December 2025 Interop
The Challenge
● OAuth is identity-centric
● Access based on scopes/claims is coarse-
gra...

Gartner IAM December 2025 Interop Architecture
AuthZEN Call
Authenticate OAuth Code Flow
ID Token/AT/RT
AuthZEN Resource S...

And now for something completely different
Live Demo!

Call to Action
• Attend one or more of the AuthZEN
interop showcase sessions
• Create an AuthZEN-based
Authorization Contr...

Where to find us
• AuthZEN mailing list: https://openid.net/wg/authzen
• GitHub: https://github.com/openid/authzen
• OpenI...

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1033581 views
Storytelling For The Web: Integrate... by Chiara Aliotta 945137 views
Artificial Intelligence, Data and C... by OECD Directorate ... 865593 views
How to Leverage AI to Boost Employe... by SocialHRCamp 363144 views
2024 State of Marketing Report – by... by Marius Sescu 206375 views
Everything You Need To Know About C... by Expeed Software 226977 views

View on Slideshare

1 of 23 Ad

View on Slideshare

1 of 23 Ad