[Initiative]: Identity and Access Management

[y-tabata]

Name

Identity and Access Management

Short description

Writing Identity and Access Management Whitepaper.

Responsible group

TAG Security and Compliance

Does the initiative belong to a subproject?

No

Subproject name

Identity and Access Management

Primary contact

@y-tabata

Additional contacts

@eddie-knight

Initiative description

This is an initiative to write the Identity and Access Management Whitepaper, which we have been carrying out at TAG Security since last year.
cncf/tag-security#1332

Description:
Authentication and authorization are the most important security considerations in the cloud-native ecosystem, as evidenced by their high ranking in the OWASP Top 10 and OWASP Top 10 API Security Risks.
On the other hand, authentication and authorization frameworks have a wide range of related specifications, including OAuth and OpenID Connect, and it can be difficult for implementers to implement the frameworks, so it would be beneficial to publish best practices for identity and access management.

Deliverable(s) or exit criteria

The deliverable is the Identity and Access Management whitepaper.