# Attendees 👉Write your name down here - @davidbrossard - @gerryatstrata - @alexbabeanu - @omri - @xmlgrrl - Roland Baum - @zirotrust (Atul Tulshibagwale, SGNL) - @shaikhtn (Tariq Shaikh, Capital One) - @saggy - @eaz - @alexolivier (Cerbos) - Allan Foster - Elie Azerad - Wade Ellery - Jamie Lin - Joshua Roberts - Mickey Martin - Dima Postnikov - David Hyland - Lukasz Radosz - Victor Lu - Ash Narkar - Mike Kiser # Agenda - Presentation by Andres Aguiar scheduled this Friday at 10am PT. Be sure to use the OpenID Zoom link - Status of AuthZen sessions at conferences? - Status of PEP scenarios/vendors for interop event? - Review of the API document # Notes - On the subject of UX authorization (came up during the search API question) ... I like to split UX policy from access control policy. The reason is that access control policy (can this subject access this protected resource) is not necessarily a direct answer to the question "can this user access this UX widget or not?". So I tend to split the two policies and the UX policy MAY choose to use the access control policy as PIP input. So a my UX policy could call a search API as input as well. (rambling courtesy of @saggy) - I'm thinking the search language should be specified independently of the AuthZEN PDP spec. As optional extensions. I could see that evolving over time as search capabilities or policy models evolve. - ## Conferences - Nordic APIs - David talking about AuthZEN and other standards. Zuplo will be there. - EIC - Omri's panel is confirmed and Atul is on the speakers' list - Identiverse - Panel TBC - Interop is confirmed - details TBC - AuthZEN webinar to be broadcast next Monday - Allan will sync up with Andi Hindle - Authenticate - Omri to follow up with Noa re. submission status - David submitted a talk proposal on authZ (beyond AuthN) ## Identiverse Interop ### PEP Apps - Omri reached out to DevRel at Kong to get their involvement in the interop - Could Tariq and Scott provide a demo app? ### Scenarios - Based on the Todo app (See Omri's demo from last week) - Omri will put together an interop use cases document that lists the requests/responses we will interop on ## API Work