Join Axiomatics at Identity Days Paris

Our Speaking Sessions

Beyond Authentication: How Policy-based Externalized Authorization Enables Better Control Over Access to Enterprise Resources

For the past 15 years, we have focused on user management and authentication processes: passwords, SSO, federation, MFA, etc.

Today, as this area matures, it's time to turn our attention to the other major focus of IAM: access control.

Historically, it inherits from authentication tools and is therefore centered on identities, roles, and groups. But the business requires more suitable means to better control users, resources, and data.

It is within this context that authorization outsourcing comes into play, an approach described in NIST ABAC 800-162 and NIST Zero Trust 800-207.

In this presentation, we will outline the evolution of the access control field. We will define the ABAC and PBAC processes.

We will present concrete implementation examples and discuss the emergence of new standards such as OpenID AuthZEN for integrating externalized authorization.

We will conclude with a roadmap that anyone can follow to adopt this new paradigm within their organization to secure data and reduce the cost of IAM processes.

Speakers