Meeting Notes 2026‐07 23 - openid/authzen GitHub Wiki

Meeting Notes - 2026-07-23

Attendees

  • Alex Olivier
  • Karl McGuinness
  • Vladi Berger
  • Rao Vadiaputi
  • Michiel Trimpe
  • Nate Yocom
  • Omri Gazitt
  • Julio
  • David Brossard
  • John Jiang
  • Dave Hyland
  • Anishma Mavuram
  • Ashmita Chakraborty
  • Atul Tulshibagwale
  • Vatsal Gupta
  • Edmund Jay

Agenda

  • (Karl) ARAP & AROP - proposal review, feedback, and outstanding issues
  • (David) Gartner

Notes

ARAP & AROP

Shared presentation: Based on https://notes.karlmcguinness.com/notes/closing-the-gaps-least-privilege-mcp-tool-calls/

Questions:

  • Omri: Do you think of the ARS as the place where the mission is
    • There should be a central mission authority service which the ARS integrates with. Avoiding a product/vendor specific approval flow for each for their MCP servers. Need for a centrazlied inbox for the approvals.
    • Omri: Google Drive is the best example of this (requesting access to the doc)
  • Atul: There is an IETF proposal which Karl is working on https://datatracker.ietf.org/doc/draft-rosomakho-oauth-txn-challenge/
  • Omri: Would like to see more IETF drafts point back AuthZEN. Why is AROP not in IETF?
    • These specs allow wide sets of use cases - applying them to ARAP use case specifically. OAuth today has to support the plumbing to support the discovery, challenge, remediation and async.
    • It could be an IETF draft - hesitant that OAuth WG doesn't see the priority - they are more focused on plumbing problems.
    • Atul: It could belong in either but happy to support it in AuthZEN.
    • Omri: There is not a critical mass from OAuth for how AuthZEN integrates. Have tried (David B, Dave Hyland) but got pushed back.
    • Atul: We should focus on more people using AuthZEN and then OAuth will follow.
    • Karl: Enterprises are moving from read only to actioning agents - need all this stack in place. Have to have AuthZEN runtime layer. OAuth plays a role, but doesn't solve runtime. Lots of products out there saying they do it but not standards based. Ref archiecture is going to be a fleet of PDPs. Look at this like OpenBanking on top of OAuth. Need profiles on many layers to get to the outcome.
    • Atul: Had the same push back with COAZ - MCP said keep it in AuthZEN.
  • Omri: Should tackle things like how RAR and AuthZEN interact.
  • Atul: Are we set on 'requestable denial'?
    • No - remedial denial
  • AlexO: What needs to land
    • The OAuth drafts needs to land first before we can do AROP and ARAP.
  • Karl: https://github.com/openid/authzen/issues/555
    • The search language in the 1.0 spec implies the decisions are binary. How does requestable denial fit in?
    • David: This would be addressed by partial eval?
    • Omri: Don't think we need to change the spec - do a search and then for those are denied, do an eval.
    • Nate: For a NHI use case - what does this thing have access to?

Gartner

  • We don't have anything planned. Would be valuable to have an interop for AuthZEN. Should we reach out to Paul, Erik, etc and keep Gail involved.
  • COAZ is the only profile for now - would be easier to sell

## Zoom Chat Atul Tulshibagwale (23 Jul 2026, 21:17) Did you get a chance to review this? https://datatracker.ietf.org/doc/draft-rosomakho-oauth-txn-challenge/ I missed that you were one of the co-authors!

David Brossard (23 Jul 2026, 21:26) it would be definitely good to cross-pollinate it's been hard @Karl McGuinness will you share the PDF? It's a summary of https://notes.karlmcguinness.com/notes/closing-the-gaps-least-privilege-mcp-tool-calls/ , right?

David Brossard (23 Jul 2026, 21:33) +1 to RAR and AuthZEN

Atul Tulshibagwale (23 Jul 2026, 21:33) I need to drop off in a few minutes, but wanted to let everyone know about the new blog post draft that we’re asking OpenID to publish: https://docs.google.com/document/d/1KrjH9rZdYiQwsk97PYPlX4WtWV-F6EAWKqkf5OLS8cY/edit?usp=sharing

David Brossard (23 Jul 2026, 21:34) Fantastic, I'll add my edits

David Brossard (23 Jul 2026, 21:33) It boils down to breaking down/categorizing authorization use cases. Which are user-driven (e.g. delegation or consent)? Which are discretionary? Which are mandatory, etc...?