News for hackers. Stuff that matters.
Re:The Road to RBAC: Evaluating and Implementing Authorizati... by aconfer on Tuesday February 06, 2024 @12:34PM (#39277499)
This is a great write up! I’m curious, did any enterprise requirements influence this decision? Specifically supporting SCIM for synchronizing users with something like okta?
Re:The Road to RBAC: Evaluating and Implementing Authorizati... by betamike on Tuesday February 06, 2024 @01:49PM (#39278686)
Author here, and yep! We eventually want to offer those kinds of enterprise features (SCIM, syncing group membership from Okta/other IdPs), so I kept that in mind throughout the process.

While I haven't gone too deep on that yet, I was thinking we'd take inspiration from how GitHub maps IdP groups to native GitHub teams. So first step here would be adding user groups/teams natively in the product.

Re:The Road to RBAC: Evaluating and Implementing Authorizati... by ayf on Tuesday February 06, 2024 @10:50AM (#39275651)
Building anything in this space is so time-consuming and needs just to be commoditized.
Re:The Road to RBAC: Evaluating and Implementing Authorizati... by grinich on Tuesday February 06, 2024 @01:59PM (#39278846)
Small plug for my startup (hope that's ok!) -

If you're looking to sync roles from a SCIM directory (like Okta or Azure AD) this is super easy to do with WorkOS. Already being used by Vercel, Planetscale, Loom, and others.

https://workos.com/directory-sync