[Presentation] Get to know heimdall - an identity aware proxy

[dadrus]

Title: Get to know heimdall - an identity aware proxy

Speakers: Dimitrij Drus (@dadrus)

Description: I would like to present a project, I'm maintaining - https://github.com/dadrus/heimdall, which is an identity aware proxy and can also turn any existing proxy supporting extrnal/forward auth capabilities into an API gateway (from security point of view). Heimdall helps addressing authentication and authorization challenges by orchestrating existing authn/authz systems, essentially closing the existing gap between the two. As such it can be used to implement edge level authentication and authorization architectures (EAA). I did that recently for TAG Network as well: https://www.youtube.com/watch?v=G8gWVNBD5IA

Time: Depending on the amount of interest roughly one hour

Availability: I live in the CET time zone. Everything, which is not mid of the night will work for me.

TO DO

• TAG Representative
• Schedule date
• By opening this issue, I, @dadrus acknowledge that the presentation topic and speaker will follow the presentation guidelines
• If this is a presentation for a project moving levels, the TAG Representative should complete the Moving Levels Recommendation

[dadrus]

Contacting you and doing a presentation was a recommendation from the TAG Network group as answer to may CNCF Sandbox application: cncf/sandbox#92

[dadrus]

Btw, the link to the presentation guide is broken. I assume, that one is meant.

Same issue exists with the link to the charter in the document I linked above.

I can open corresponding PRs if you like

[mlieberman85]

Hi, we can get you on the schedule. Let me check what upcoming and then throw some dates in here.

[mlieberman85]

I spoke to @dadrus and he said EMEA TAG Security meeting is most convenient to present for him.

@dadrus here are the open slots we have:

September 11th
October 9th

It looks like we have nothing planned post Oct 9th as well and our EMEA meetings happen every other week. So

October 23rd
Nov 6th

etc.

[dadrus]

September 11th won't work for me, unfortunately, but October 9th is perfectly fine.

As you're aware, I've already presented Heimdall to TAG Network, which led to the video I linked above. I'm curious if you're interested in exploring topics beyond that presentation for deeper insights and more details?

Thank you in advance!

[mlieberman85]

Sure, so beyond the usual basics (use case, goals, current features) TAG Security tends to be interested in a few things:

• Security of the project, i.e. have you done a lightweight threat model? What sorts of security activities, tests, etc. do you do for the project.
• Any integrations or interest in integrations with open source security tools, especially cloud native ones, e.g. Kyverno, OPA, in-toto, etc.