Auth0
p/auth0
Secure access for everyone. But not just anyone.
Dan McCorriston
OpenFGA — Relationship-based access control made fast and easy to use.
1
OpenFGA is a fast, flexible Fine-Grained Authorization system inspired by Google's Zanzibar paper, designed for reliability and low latency. Developers can easily model and integrate an authorization layer consistently across all of their applications.
Replies
Best
Damian Schenkelman
Hello everyone! My name is Damian Schenkelman, Principal Architect at Auth0, now a product unit of Okta. We’re really excited to announce the availability of OpenFGA, an open source Fine-Grained Authorization system for developers, initially built by Okta. OpenFGA is a fast, scalable, and easy to use solution to fine-grained authorization that is inspired by Google Zanzibar, the system Google uses for authorization for their products (Cloud, Drive, Youtube, etc.). OpenFGA is designed for reliability and low latency at scale. It enables developers to easily define their authorization model across all their applications, and to extract authorization logic from application code. By making OpenFGA open source, we hope to create a rich and active community and ecosystem for developers and teams to implement authorization at scale. For example, today OpenFGA supports PostgreSQL as a backend. By making OpenFGA open source, we expect to have teams build backends for other databases they want to deploy it with. Moreover, we imagine OpenFGA integrations will be created for authorization policies engines like OPA, proxies like Envoy, API gateways like Kong; identity providers (Auth0, Okta, AzureAD), SDKs for platforms and frameworks (Python, Java, Spring, Next.js), etc. Authorization is a complex, critical topic for organizations. With OpenFGA we look to enable teams with fine-grained authorization requirements that need specific deployment characteristics. Want to deploy to multiple cloud providers or on-premise? Have specific compliance goals like FedRAMP or HIPAA? Deploy OpenFGA using your infrastructure and solve your authorization pains. Later this year we are aiming to launch Auth0 Fine Grained Authorization (FGA), "fine-grained authorization" as a service for developers. Currently in Beta, Auth0 FGA is built on top of OpenFGA and provides "authorization as a service”, in a scalable, reliable, fast, and secure way. Auth0 FGA is designed to handle authorization across all of your applications. As an industry, we'll benefit from having a common way to manage fine-grained authorization. At Okta we want to help make this happen. Learn more about our OpenFGA solution at https://openfga.dev/. If you want to get started with the SaaS, try out the Auth0 FGA beta for free at https://auth0.com/developers/lab....