Our Speaking Sessions
Leverage OpenID AuthZEN To Enable Consistent Fine-Grained Access Control At Scale And Provide Visibility & Accountability Across Your IT Landscape
Date: Thursday, May 21 at 2:30-3:10pm
OpenID AuthZEN, initiated in 2023, was ratified as OpenID AuthZEN 1.0 in January 2026. Over the past 36 months, the OpenID working group has gathered use cases, prior implementations, and customer requirements to implement a new flexible standard to externalize authorization. AuthZEN enables architects who want to roll out consistent, fine-grained and runtime access control across their entire IT portfolio from legacy systems, home-grown apps, APIs, and AI processes (MCP, A2A, LLM). OpenID AuthZEN augments the architectures proposed in NIST ABAC 800-162 and Zero Trust 800-207 by providing a standardized set of authorization APIs through which access can be queried. We will look at how AuthZEN ties into the identity fabric and interacts with other standards such as OAuth and Shared Signals to provide a secure-by-design enterprise architecture. In this presentation, we will provide attendees with an overview of the standard, authorization design patterns, how to get involved with the working group, and a call to arms to require your software providers adopt AuthZEN. Attendees will walk away with benefits they can expect from adopting OpenID AuthZEN such as streamlined IAM, better visibility and audits, and cybersecurity threat mitigation.
