The OpenID Foundation’s AuthZEN working group standardizes how applications ask a policy decision point for an authorization decision. Two working-group drafts adopted in June 2026 extend it to agents: AARP for prerequisites such as approvals and consent, and COAZ, a profile for MCP tool authorization.
OpenID AuthZEN
The OpenID Foundation’s AuthZEN working group standardizes how applications ask a policy decision point for an authorization decision. Two working-group drafts adopted in June 2026 extend it to agents: AARP for prerequisites such as approvals and consent, and COAZ, a profile for MCP tool authorization.
Where it stands
As of 2026-10-13, the Agentic Standards Map records:
AARP and COAZ adopted as Working Group Drafts on 2026-06-15; to be refined through community review and interoperability testing.
Why it matters to agents
AARP covers prerequisites such as approvals, consent or attestations before a policy decision; COAZ, the profile for MCP tool authorization, maps information models into the Subject-Action-Resource-Context structure. The OpenID Foundation published a whitepaper, “Identity Management for Agentic AI” (OpenID Foundation page 2025-10-07, arXiv 2510.25819 v1 2025-10-29), on authentication and authorization for AI agents; it “outlines the resources already available for securing today’s agents and presents a strategic agenda”. …
Sources
- https://arxiv.org/abs/2510.25819
- https://openid.net/new-whitepaper-tackles-ai-agent-identity-challenges/
- https://openid.net/openid-foundation-advances-authorization-for-the-agent-era-with-new-authzen-working-group-drafts/
- https://openid.net/wg/
Status and relevance quoted, shortened, from the Agentic Standards Map by Francesco Marinoni Moretto, CC BY 4.0, https://frmoretto.github.io/agentic-standards-map/. The full entry, with every dated source, is in map.json under oidf-authzen-agents.
Industry: security
Related standards
Standards this one builds on, supersedes, profiles or is commonly deployed beside.
