Auth0

In this chat, Damian Schenkelman (Principal Engineer @ Auth0) chats with Alan Yao (Staff Software Engineer @ AirBnB) about Himeji, Airbnb's authorization system inspired on Google Zanzibar. They discuss how Himeji is built, how its flexibility empowers teams when building new features and the alternatives they considered. Like this episode? Be sure to leave a five-star review and share Authorization in Software with your network! You can connect with Damian on Twitter at @dschenkelman, or reach the Auth0 team focused on Fine Grained Authorization at @auth0lab.

Damian Schenkelman hosts Authorization in Software. Damian is a Principal Engineer at Auth0's Office of the CTO, where he does research and development of forward looking products. One of his focuses is Authorization at scale. Before Auth0, Damian spent many years working for and at Microsoft on Azure, Media and patterns & practices related initiatives. He spends his spare time with family, friends, exercising and catching up on all things NBA.

Damian Schenkelman

Principal Engineer @ Auth0

Alan Yao has worked on Airbnb's Trust team for 5 years on account takeovers and then authorization and authentication infrastructure. He is interested in both the tricky fraud patterns Airbnb faces as well as the distributed system scaling challenges. Recently, he has spent his spare time remodeling and woodworking.

Alan Yao

Staff Software Engineer @ Airbnb

In this chat, Damian Schenkelman (Principal Engineer @ Auth0) chats with Alan Yao (Staff Software Engineer @ AirBnB) about Himeji, Airbnb's authorization system inspired on Google Zanzibar. They discuss how Himeji is built, how its flexibility empowers teams when building new features and the alternatives they considered.


Himeji: A Scalable Centralized System for Authorization at Airbnb

In this Authorization in Software chat, host Damian Schenkelman, Principal Engineer at Auth0 is joined by Alan Yao, Staff Software Engineer at Airbnb. ALan joins the show to discuss Himeji, Airbnb's authorization system inspired on Google Zanzibar. They discuss how Himeji is built, how its flexibility empowers teams when building new features and the alternatives they considered.


Authorization in Software features chats with industry subject matter experts in Authorization. Some of the covered topics are: how authorization is implemented at specific companies (e.g.: Airbnb, Slack, Github), how industry standards relate to authorization, and the history of authorization in software. Damian Schenkelman hosts Authorization in Software. Damian is a Principal Engineer at Auth0's Office of the CTO, where he does research and development of forward looking products. One of his focuses is Authorization at scale. Before Auth0, Damian spent many years working for and at Microsoft on Azure, Media and patterns &amp; practices related initiatives. He spends his spare time with family, friends, exercising and catching up on all things NBA.

Authorization in Software

In this episode, Damian Schenkelman (Principal Engineer @ Auth0) and Tim Hinrichs (Co-founder &amp; CTO @ Styra) chat about Rego, OPA and Styra: their history, differences, use cases and what it is like to build Open Policy Agent as open source software. Like this episode? Be sure to leave a five-star review and share Authorization in Software with your network! You can connect with Damian on Twitter at @dschenkelman, or reach the Auth0 team focused on Fine Grained Authorization at @auth0lab.

Tim Hinrichs is a co-creator of the Open Policy Agent project and the CTO and co-founder of Styra. Before that, he was a PTL in OpenStack and was a software engineer at VMware. Tim spent the last 18 years developing declarative languages for different domains such as cloud-computing, software-defined networking, configuration management, web security, and access-control. He received his PhD in Computer Science from Stanford University in 2008.

Tim Hinrichs

Co-founder & CTO @ Styra

In this episode, Damian Schenkelman (Principal Engineer @ Auth0) and Tim Hinrichs (Co-founder & CTO @ Styra) chat about Rego, OPA and Styra: their history, differences, use cases and what it is like to build Open Policy Agent as open source software.


All things Rego, OPA and Styra

In this Authorization in Software chat, host Damian Schenkelman, Principal Engineer at Auth0 is joined by Tim Hinrichs, co-founder & CTO @ Styra and co-creator of Open Policy Agent. Tim joins the show to discuss Rego, OPA and Styra: their history, differences, use cases and what it is like to build Open Policy Agent as open source software.


In this chat, Damian Schenkelman (Principal Engineer @ Auth0), Aaron Hinrichs and Andy Harb (Senior Engineers @ Carta) chat about AuthZ - Carta's highly scalable permission system inspired by Google Zanzibar. They discuss the authorization challenges at Carta, why they decided to go with a Google Zanzibar like approach and the benefits the company gets from this. Like this episode? Be sure to leave a five-star review and share Authorization in Software with your network! You can connect with Damian on Twitter at @dschenkelman, or reach the Auth0 team focused on Fine Grained Authorization at @auth0lab.

Aaron Tainter is a Senior Fullstack Engineer currently working on the Identity and Access Management team at Carta. Some of his past roles include site-reliability, new products, and distributed systems at PayPal/Ebay. In his free time, Aaron enjoys creating How-To videos about software, robotics, and IoT projects for his YouTube channel "Hacker Shack" which has a community of 165,000 coding enthusiasts.

Aaron Tainter

Senior Fullstack Engineer @ Carta

Andy Harb is a Senior Software Engineer currently working at Carta on the Identity and Access Management Team. Before Carta he worked as a team lead for a software engineering team at the Jet Propulsion Laboratory in Pasadena. He enjoys spending his spare time outdoors exploring hiking trails with his two children and wife.

Andy Harb

Senior Software Engineer @ Carta

In this chat, Damian Schenkelman (Principal Engineer @ Auth0), Aaron Hinrichs and Andy Harb (Senior Engineers @ Carta) chat about AuthZ - Carta's highly scalable permission system inspired by Google Zanzibar. They discuss the authorization challenges at Carta, why they decided to go with a Google Zanzibar like approach and the benefits the company gets from this.


AuthZ: Carta’s highly scalable permissions system

In this Authorization in Software chat, host Damian Schenkelman, Principal Engineer at Auth0 is joined by Aaron Tainter and Andy Harb, Senior Software Engineers at Carta. Aaron and Andy join the show to discuss AuthZ - Carta's highly scalable permission system inspired by Google Zanzibar. They explain the authorization challenges at Carta, why they decided to go with a Google Zanzibar like approach and the benefits the company gets from this.


Jake Byman (Engineer @ CommonRoom), Aish Raj Dahal (Staff Engineer @ Slack) and Damian Schenkelman (Principal Engineer @ Auth0) talk about Role Management at Slack: how authorization at Slack works and how it is implemented. Like this episode? Be sure to leave a five-star review and share Authorization in Software with your network! You can connect with Damian on Twitter at <a href="https://twitter.com/dschenkelman" rel="noopener noreferrer" target="_blank">@dschenkelman</a>, or reach the Auth0 team focused on Fine Grained Authorization at <a href="https://twitter.com/auth0lab" rel="noopener noreferrer" target="_blank">@auth0lab</a>.

Aish is a software engineer at Slack. His current work is focused on the development of scalable enterprise access control solutions.  Prior to Slack, Aish worked at PagerDuty, HackerRank and Goldman Sachs. Outside of work, Aish enjoys running, playing soccer and watching his favorite team Liverpool FC.

Aish Raj Dahal

Staff Engineer @ Slack

Jake Byman is a software engineer at a Seattle-based startup called Common Room. Previously, he worked at Slack where he worked on scaling the enterprise product with a focus on admin tooling, APIs, and roles & permissions. Jake grew up in the United Kingdom, and came to the US for college. Jake is now based in the Bay Area. Outside of his work in software, Jake enjoys hiking, cooking, and spending time with friends. 

Jake Byman

Engineer @ CommonRoom

Jake Byman (Engineer @ CommonRoom),  Aish Raj Dahal (Engineer @ Slack) and Damian Schenkelman (Principal Engineer @ Auth0) talk about Role Management at Slack: how authorization at Slack works and how it is implemented.


Role Management at Slack

In this Authorization in Software chat, host Damian Schenkelman, Principal Engineer at Auth0 is joined by Jake Byman and Aish Raj Dahal. Aish and Jake join the show to discuss Slack's authorization features, their implementation and architecture.


Damian Schenkelman (Principal Engineer @ Auth0) chats with David Brossard (Senior Director of Identity Product Management @ Salesforce) about the history and current state of authorization in software. Like this episode? Be sure to leave a five-star review and share Authorization in Software with your network! You can connect with Damian on Twitter at <a href="https://twitter.com/dschenkelman" rel="noopener noreferrer" target="_blank">@dschenkelman</a>, or reach the Auth0 team focused on Fine Grained Authorization at <a href="https://twitter.com/auth0lab" rel="noopener noreferrer" target="_blank">@auth0lab</a>.

David is the Senior Director of Identity Product Management at Salesforce. He oversees the design and development of Salesforce's Identity offering including CIAM and Enterprise Identity.

Previously David was VP Customer Relations at Axiomatics, the leader in externalized authorization, helping customers design solutions that enable secure data access.

David's main focus is identity & access management and API security. David has published several papers and contributed to several books on API security, identity, and attribute-based access control.

David is also a contributor to several identity standards including OAuth and XACML where he drove standardization efforts for developers on attribute-based access control (ABAC).

David is a regular speaker at conferences including Identiverse, Gartner IAM summits, and the European Identity Conference.

David holds an M.Eng from the National Institute of Applied Sciences in Lyon. He is a Sun Certified Enterprise Architect (yes he's that old) and a Certified Security Testing Professional.

David maintains a blog on identity and access at http://www.webfarmr.eu

David Brossard

Senior Director of Identity Product Management  @ Salesforce

Authorization: its history and its state in 2021

In this Authorization in Software chat, host Damian Schenkelman, Principal Engineer at Auth0 is joined by David Brossard, Senior Director of Identity Product Management at Salesforce. David joins the show to chat about the history and current state of authorization in software.


Damian Schenkelman (Principal Engineer @ Auth0) chats with Bryana Knight and Víctor Roldán Betancort (Staff Engineers at GitHub) about GitHub's Authorization needs, its history, and their future plans. Like this episode? Be sure to leave a five-star review and share Authorization in Software with your network! You can connect with Damian on Twitter at <a href="https://twitter.com/dschenkelman" rel="noopener noreferrer" target="_blank">@dschenkelman</a>, or reach the Auth0 team focused on Fine Grained Authorization at <a href="https://twitter.com/auth0lab" rel="noopener noreferrer" target="_blank">@auth0lab</a>.

Víctor is a Staff Engineer at GitHub's Authorization team. With over 14 years of professional experience in software engineering, Víctor has worked across various industries - developer tools, automotive and e-commerce.
He's devoted a good part of that time to the IAM space, building, maintaining and operating large-scale authentication and authorization services. In his free time he enjoys family / friends, music production, and videogames.

Victor Roldán Betancort

Staff Software Engineer @ GitHub

Bryana Knight is a Staff Engineer working on Authorization and Identity at GitHub. Prior to GitHub, Bryana worked at several start-ups in the HealthTech and Daily Deals space. She is also a Tech Lead and Organizer for the Boston chapter of WomenWhoCode, a global nonprofit dedicated to inspiring women to excel in technology careers. Outside of work you can find her traveling, getting outside and spending time with family. 

Bryana Knight

Damian Schenkelman (Principal Engineer @ Auth0) chats with Bryana Knight and Víctor Roldán Betancort (Staff Engineers at GitHub) about GitHub's Authorization needs, its history, and their future plans.


Authorization at GitHub

In this Authorization in Software chat, host Damian Schenkelman, Principal Engineer at Auth0 is joined by Bryana Knight and Victor Roldan Betancourt, Staff Engineers at GitHub. Bryana and Victor join the show to discuss GitHub's authorization features, their implementation and architecture.


Juan Rossi (Platform Security Senior Manager @ Mercado Libre) chats with Damian Schenkelman (Principal Engineer @ Auth0) about dealing with permissions and authorization at <a href="https://www.mercadolibre.com.ar/" rel="noopener noreferrer" target="_blank">Mercado Libre</a> (LATAM biggest e-commerce). Like this episode? Be sure to leave a five-star review and share Authorization in Software with your network! You can connect with Damian on Twitter at <a href="https://twitter.com/dschenkelman" rel="noopener noreferrer" target="_blank">@dschenkelman</a>, or reach the Auth0 team focused on Fine Grained Authorization at <a href="https://twitter.com/auth0lab" rel="noopener noreferrer" target="_blank">@auth0lab</a>.

Juan Rossi is a Senior Engineering Manager at MercadoLibre's Platform Security team. The team manages Authentication and Authorization for thousands of microservices and millions of requests per minute. Before MercadoLibre, he co-founded Mango (acquierd by MercadoLibre), a company focused on building payment processing solutions. He's a food nerd and loves geeking about food science.

Juan Rossi

Platform Security Senior Manager @ Mercado Libre

Juan Rossi (Platform Security Senior Manager @ Mercado Libre) chats with Damian Schenkelman (Principal Engineer @ Auth0) about dealing with permissions and authorization at Mercado Libre (LATAM biggest e-commerce).


Authorization at Mercado Libre

In this Authorization in Software chat, host Damian Schenkelman, Principal Engineer at Auth0 is joined by Juan Rossi, Platform Security Senior Manager. Juan joins the show to discuss why authorization is important for Mercado Libre, how it works and how his platform team builds an internal product that other teams leverage to make Mercado Libre more secure.
