Meeting Notes - 2026-06-25

Attendees

• Alex Olivier
• Alex Babeanu
• Atul Tulshibagwale (CrowdStrike)
• Gert Drapers
• Omri Gazit
• David B
• Mike Schwartz
• Michiel Trimpe
• Nate Yocom
• George Fletcher
• Edmund Jay
• John Jiang
• Roland Baum

Notes

• Identiverse recap
  • Masterclasses
  • Lots of interest to join WG (eg T-Mobile, Ping)
  • OpenAI + keynote callouts
• Time of this call
  • New time Thursday 1pm EST
  • AlexO to get updates
• Certification portal
  • https://openid.github.io/authzen/authorization-api-1_0-certification-scenario.html
  • Axiomatics + Cerbos run already - who else?
  • Certification website location: https://www.certification.openid.net
  • Consistency of AuthZEN in certification portal
  • Process to go live - get at least 3 implementation
    • Axio
    • Cerbos
    • Topaz
    • IndyKite?
  • Edmund - has some clarifications questions around HTTP error codes - will send to mailing list
• COAZ progress
  • Resolving issues for CEL in mapping based on last call
    • https://github.com/openid/authzen/issues/491
    • https://github.com/openid/authzen/issues/494
  • CEL maintainer has volunteered to help
  • AlexO - to raised a PR with the $ syntax as a propsoal to point them at plus the 'Default' mapping - https://hackmd.io/PbYyzxb1ShuL6DltYIbfkA
  • Omri - how do we break this into mapping concept and protocol versions
  • AlexO - to share next week
• David's SOAP proposal
  • Seperating the business vs technical specs
  • Colaborate with AlexB
  • Michiel - need to have a foucsed session on advice/obligations/constraints
  • Omri
    1. we shouldn't ship anything which would not be 100% back compat to v1
    2. do it in a profile
  • AlexB - we have Karl's profile but this could be simpler. Start with advice. Obligation maybe covered by Karl's proposal
  • DavidB - agree it shouldnt be breaking and should be in a profile. Don't want to be seen as unstable spec
  • George - in the coupled world we need a way for the PDP to say 'if you understand this, you can fix it by doing XYZ'. Don't have a strong opinion on the name for it. Functionality needs to be there. IETF - transactions authorization challegne spec?
  • Omri - advice is