W3C CCG - Upcoming Meeting

This event series recurs from 2 September 2025 until 30 June 2026.

It is the continuation of W3C CCG - Upcoming Meeting from 13 May 2025 until 26 August 2025 (16 events).

Next event

Upcoming events

See all upcoming events in this series

Recent events

W3C CCG - Use Cases for Access Management

  • Past
  • Confirmed

You've Got the Wrong Use Case

Alan H. Karp
SitePassword

Abstract (provided by Perplexity.ai)

This talk argues that many identity and access management (IAM) failures come from starting with the wrong use cases and ignoring the hazards that emerge as systems grow more complex. Drawing on three decades of experience—from early large‑scale access control deployments to work with the US Navy and modern systems like AWS Cedar and Solid—it shows how designs focused on simple ACL-style scenarios bake in vulnerabilities, complexity, and usability problems.

Using a progression of concrete use cases, the talk surfaces hazards such as excess authority, weak delegation, missing responsibility tracking, awkward conditional policies, and transitive access issues, then demonstrates how authorization‑centric models and capability-style approaches address them more naturally than traditional authentication‑centric IAM. Attendees will leave with a sharper vocabulary for IAM “use case hazards” and a set of design principles for building systems that handle delegation, composition, and accountability without bolting on fixes after the fact.

Meeting Link: https://meet.google.com/dzc-yjfq-tyf

– Eastern Standard Time

See all past events in this series