Tags: open policy agent, authorization
Emerging technologies are challenging old paradigms and unveiling new ways of approaching the security discipline that enables the right individuals to access the right resources at the right times for the right reasons.
EmpowerID has embedded innovative technologies in every aspect, providing flexible and mature IAM capabilities in the cloud, on premise and in hybrid environments, addressing the mission-critical need across increasingly heterogeneous technology environments, and meeting increasingly rigorous compliance requirements.
There has been some exciting news for those of us who have been following the evolution of Open Policy Agent as an new technology for distributed policy enforcement. The Cloud Native Computing Foundation (CNCF) has announced that Open Policy Agent has demonstrated the maturing and adoption level to warrant graduation from its status as an incubating standard. This is a major accomplishment for the OPA team and community. At EmpowerID, we have been tracking its progress and integrating it into our external authorization offering.
CNCF Announcement: https://www.cncf.io/announcements/2021/02/04/cloud-native-computing-foundation-announces-open-policy-agent-graduation/
The CNCF describes OPA as follows: "OPA is an open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack. The project was accepted into the CNCF sandbox in April 2018 and one year later was promoted to incubation. More than 90 individuals from approximately 30 organizations contribute to OPA, and maintainers come from four organizations, including Google, Microsoft, VMware, and Styra."
I've included a short video below of EmpowerID leveraging OPA in conjunction with another exciting standard for authorization, User Managed Access 2.0 (UMA).
Tags: open policy agent, authorization
EmpowerID is the all-in-one Identity Management and Cloud Security platform offered as SaaS or on-premise. Globally managing millions of identities in diverse enterprises, EmpowerID takes a unique approach dubbed "Compliant Access Delivery" to automate user provisioning, access management, and access governance.
Built on a single codebase for manageability and scalability, EmpowerID ships with a powerful API, a visual workflow designer and over 1,000 ready-to-use workflows for rapid deployment.