---
title: "AuthZEN Request/Response Profile for OAuth 2.0 Rich Authorization Requests"
abbrev: "AuthZEN RAR Profile"
category: info

docname: draft-brossard-oauth-rar_authzen-latest
submissiontype: IETF
number:
date:
consensus: true
v: 3
area: "Security"
workgroup: "Web Authorization Protocol"
keyword:
- authorization
- abac
- authzen
- openid
venue:
group: "Web Authorization Protocol"
type: "Working Group"
mail: "[e-mail]"
arch: "https://mailarchive.ietf.org/arch/browse/oauth/"
github: "davidjbrossard/authzen-rar-profile"
latest: "https://davidjbrossard.github.io/authzen-rar-profile/draft-brossard-oauth-rar_authzen.html"

author:
-
fullname: David Brossard
organization: Axiomatics
email: [e-mail]
-
fullname: Omri Gazitt
organization: Aserto
email: [e-mail]
-
fullname: Alexandre Babeanu
organization: 3Edges
email: [e-mail]

normative:

informative:

--- abstract

This specification defines a profile of OAuth 2.0 Rich Authorization Requests leveraging the OpenID AuthZEN authorization request/response formats within the authorization_details JSON object. Authorization servers and resource servers from different vendors can leverage this profile to request and receive relevant authorization decisions from an AuthZEN-compatible PDP in an interoperable manner.

--- middle

# Introduction

AuthZEN will focus on specific areas of interoperability by documenting common authorization patterns, define standard mechanisms, protocols and formats for communication between authorization components, and recommend best practices for developing secure applications.
OVERVIEW.

# Conventions and Definitions

{::boilerplate bcp14-tagged}

# Security Considerations

TODO Security

# IANA Considerations

This document has no IANA actions.

--- back

# Acknowledgments
{:numbered="false"}

TODO acknowledge.