A directory of products and open-source projects that implement the OpenID AuthZEN Authorization API, either as a PDP (decision point that answers AuthZEN requests) or as a PEP (enforcement point such as an API gateway, IdP or application that calls one).
Missing or out of date? Open an issue with a link to public documentation.
AuthZEN implementations
| Product / project | Role | Notes |
|---|---|---|
| Axiomatics | PDP | Policy-based (ABAC) authorization platform using ALFA. Exposes AuthZEN endpoints; hosts the public demo PDP at pdp.alfa.guide. |
| Aserto / Topaz | PDP | Open-source Topaz authorizer with native AuthZEN support. |
| Cerbos | PDP | Open-source policy decision point with AuthZEN support. |
| OpenFGA | PDP | Relationship-based (ReBAC) authorization engine with AuthZEN endpoints. |
| Amazon Verified Permissions | PDP (via adapter) | Cedar-based service. AWS shows how to answer AuthZEN requests with it. |
| SGNL | PDP | Continuous access management platform. Supports AuthZEN-compliant protected systems. |
| Keycloak | IdP / PDP | Open-source IdP with AuthZEN authorization support. |
| Curity | IdP / PEP | Curity Identity Server AuthZEN Authorization Manager. |
| cidaas | IdP | CIAM platform supporting AuthZEN 1.0. |
| Gravitee Access Management | IdP / PEP | Gravitee AM can delegate authorization to an AuthZEN engine. |
| Traefik Hub | API gateway / MCP gateway PEP | Enforces AuthZEN decisions at the API and MCP gateway. |
Listing order is not a ranking. Inclusion is based on publicly available documentation. Conformance claims are each vendor's own. Last reviewed 3 November 2026.
Interop results
The working group runs public interops where PEPs and PDPs from different vendors exercise the same test suite, including at Identiverse 2024 and Gartner IAM. Interop rounds have covered the evaluation API, the Search APIs, API gateways and IdP integrations.