Episode 12: Diving Into Authorization And Policy Bases Access Controls

SilverLining IL

Attendees

Guest: Tsachi Lutaty

Guest title: R&D manager

Company: PlainID

Abstract

In the past years we have reached important progress in authentication. Multi factor authentication and Identity Federation solved many of the identity authentication challenges. So it is now time to focus on the second aspect of Identity & Access Management - the aspect of Identity Authorization. In this podcast we are talking with Tsachi Lutaty, R&D manager for PlainID, about the move from Role based access controls to Policy based access controls and how organizations can better engineer their authorization scheme and policies.

Timing:

0:41 introducing our guest

1:25 Introducing PlainID

2:45 Authorization challenges - what are modern authorization challenges

8:00 Role based access control vs. Attribute / Policy based access control

15:30 Existing authorization standards

18:58 How can we better engineer authorization system - The technology angle

26:15 How can we better engineer authorization system - The process angle

29:30 How can we better engineer authorization system - The people angle

32:50 Summary and final words