[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_103":104},"routes/episodes/detail",{"_9":10,"_11":12},"entry",{"_16":-5,"_17":86,"_19":20,"_21":87,"_23":88,"_25":89,"_27":90,"_28":91,"_30":31,"_32":92,"_34":93,"_36":94,"_38":95,"_40":96,"_42":97,"_44":98,"_46":99},"related",[13,14,15],{"_16":-5,"_17":70,"_19":20,"_21":71,"_23":72,"_25":73,"_27":-5,"_28":74,"_30":31,"_32":75,"_34":76,"_36":77,"_38":78,"_40":79,"_42":80,"_44":81,"_46":82},{"_16":-5,"_17":54,"_19":20,"_21":55,"_23":56,"_25":57,"_27":-5,"_28":58,"_30":31,"_32":59,"_34":60,"_36":61,"_38":62,"_40":63,"_42":64,"_44":65,"_46":66},{"_16":-5,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":-5,"_28":29,"_30":31,"_32":33,"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47},"author","categories",[],"collection","episodes","data",{"_48":49,"_50":51,"_52":53},"date","2025-03-25T17:00:12Z","excerpt","The Eclipse Decentralized Claims specification defines “Dataspaces” which enable participants to secure data access using credentials associated with an identity. The specification defines a set of…","featuredImage","html","

The Eclipse Decentralized Claims specification defines “Dataspaces” which enable participants to secure data access using credentials associated with an identity. The specification defines a set of protocols for asserting participant identities, issuing verifiable credentials, and presenting verifiable credentials using a decentralized architecture for verification and trust. Is this an example of TBAC? Join the discussion to find out!

\n","readingMinutes",1,"route","/office-episodes/episode-98-eclipse-decentralized-claims-protocol","slug","episode-98-eclipse-decentralized-claims-protocol","sourcePath","content/episodes/episode-98-eclipse-decentralized-claims-protocol.md","tags",[],"title","Episode 98: Eclipse Decentralized Claims Protocol","toc",[],"updated","2025-03-18T20:53:06Z","wordCount",58,"wpId","34898","wpLink","https://gluu.org/office-episodes/episode-98-eclipse-decentralized-claims-protocol/","video","https://www.youtube.com/embed/yWvU4fobnCc",[],{"_48":67,"_50":68,"_52":69},"2025-03-27T18:00:42Z","“OpenID Provider Commands” is a new proposed protocol via Dick Hardt and Karl McGuinness which introduces a mechanism for delivering backchannel “command tokens” (a JWT) that allows an OpenID…","

“OpenID Provider Commands” is a new proposed protocol via Dick Hardt and Karl McGuinness which introduces a mechanism for delivering backchannel “command tokens” (a JWT) that allows an OpenID Provider (OP) to send the following messages to an OpenID Relying Party (RP):

🔑 Activate an account\n🔄 Maintain an account\n⏸️ Suspend an account\n🔓 Reactivate an account\n📦 Archive an account\n♻️ Restore an account\n❌ Delete an account\n🚫 Unauthorize an account\nIn this episode we’ll hear from the authors why they think this new protocol is needed, and why their solution is the right design for the Internet.

\n","/office-episodes/episode-99-openid-provider-commands-new-jwt-tokens-for-rp-acct-mgt","episode-99-openid-provider-commands-new-jwt-tokens-for-rp-acct-mgt","content/episodes/episode-99-openid-provider-commands-new-jwt-tokens-for-rp-acct-mgt.md",[],"Episode 99: OpenID Provider Commands: New JWT Tokens for RP Acct Mgt",[],"2025-03-18T20:52:57Z",101,"34899","https://gluu.org/office-episodes/episode-99-openid-provider-commands-new-jwt-tokens-for-rp-acct-mgt/","https://www.youtube.com/embed/Cq9_YiBP_co",[],{"_48":83,"_50":84,"_52":85},"2025-04-01T18:00:10Z","The number of JWT tokens out there is rapidly expanding. Beyond traditional federation tokens, like OAuth access tokens, and OpenID identity assertions, there is whole new category of “decentralized…","

The number of JWT tokens out there is rapidly expanding. Beyond traditional federation tokens, like OAuth access tokens, and OpenID identity assertions, there is whole new category of “decentralized tokens”, i.e. verifiable credentials, with myriad issuers and potential ecosystem schemas. We are also seeing JWTs issued by platforms like Google to attest to the integrity of mobile software installed on a device. FIDO is defining JWT attestations about the security of authenticators (how is the key stored?). Tokens are used by federations to convey trust, for example the JWTs issued by open banking federations to fintech companies. The pace is not slowing down. The WIMSE working group at the IETF is likely to introduce several new tokens for workload identity. And another draft at the IETF called “transaction tokens” is enabling enteprises to embed business-specific details into tokens. How are access control models going to evolve to address this new important input to policies? There is one inevitable conclusion: person-centric access control models like RBAC can solve an increasingly smaller subset of the access control challenges enterprises are facing.

In this 100th episode, we’ll discuss if a new solution has presented itself: Token Based Access Control. Does TBAC offer enterprises a way to implement continuous authentication and just in time access control for both humans and workloads across a range of mobile, cloud, and even disconnected applications? And if so, what would be the impact on how enterprises need to think about access control in the post token-explosion world we are living in?

\n","/office-episodes/episode-100-is-tbac-the-next-big-thing","episode-100-is-tbac-the-next-big-thing","content/episodes/episode-100-is-tbac-the-next-big-thing.md",[],"Episode 100: Is TBAC the Next Big Thing?",[],"2025-03-18T20:54:34Z",253,"34900","https://gluu.org/office-episodes/episode-100-is-tbac-the-next-big-thing/","https://www.youtube.com/embed/bVaCB57we-Q",[],{"_48":100,"_50":101,"_52":102},"2024-05-10T11:51:19Z","Identerati Office Hours, Episode 004: Authz: Authz Renaissance: Why now?","/media/episodes/yhatwx-iiw-38-tue-session-5-surprise-guests-and-topic.jpg","

Identerati Office Hours, Episode 004: Authz: Authz Renaissance: Why now?

\n","/office-episodes/episode-04-authz-renaissance-why-now","episode-04-authz-renaissance-why-now","content/episodes/episode-04-authz-renaissance-why-now.md",[],"Episode 04: Authz Renaissance: Why now?",[],"2024-07-25T10:05:20Z",10,"32359","https://gluu.org/office-episodes/episode-04-authz-renaissance-why-now/","https://www.youtube.com/embed/-EvdosDlW3w","indexable",true]

Episode 04: Authz Renaissance: Why now?

Related