---
# System prepended metadata

title: Meeting Notes 2024-11-19
tags: [meeting-notes]

---

# Meeting Notes 2024-11-19

## Attendees

- Victor Lu
- @alexbabeanu
- @davidbrossard 
- @vladi 
- Phillip M. (KC)


## Agenda
  - Vladi's presentation on Search/Partial evaluation
  - Outreach list

## Notes

### Search & Partial Evaluation

- We have 2 proposals now
    - The original one @zirotrust put together ([link](https://hackmd.io/@oidf-wg-authzen/authzAPI))
    - Vladi's [proposal](https://hackmd.io/@oidf-wg-authzen/HkLiZVdb1l)
    - We have relative consensus on the request format
        - Derivative of the AuthZEN request format with omitted attributes
    - Agreeing on the response format is harder
        - We could choose an existing query language e.g. SCIM's search/query language, SQL...
    - Can we agree on a broader format?
        - Challenge: existing solutions (PlainID, Axiomatics) have responses that are similar to the underlying policy language (XACML...)
        - Proposal: use SCIM's format (see sample vendor [documentation](https://bookstack.soffid.com/books/scim/page/scim-query-syntax) and [RFC7644](https://datatracker.ietf.org/doc/html/rfc7644))

- Use Cases
    - Runtime data filtering
    - Access Reviews
    - Entitlements generation

- @alexbabeanu: let's try to align with existing search filters languages.

- Victor briefly brought up IPSIE, the new OpenID WG and how he has a need to standardize authorization use cases across the enterprise.
- David reached out to Aaron Parecki to try and include AuthZEN/ABAC into the IPSIE conversation. Next steps TBD

## Action Items

- @vladi will take his proposal and update his examples to be inline with the AuthZEN `evaluate` proposal.

