Housecarl AuthZ is an authorization service for cloud-native, zero-trust-oriented systems.

Quick Start

Sign up on https://housecarl.cloud and select the AuthZ service, free tier. This gives you access to enough API calls to start evaluating the service.

• Your "tenant" name and uuid were already defined in the sign up flow, and a "root domain" was created. Policies live in domains.
• Follow the Quick Start to build and install housectl.
• Run housectl config login <ENDPOINT> <USERNAME> [--tenant <TENANT>].
• Set up a policy for your test!
• Run housectl authz can-i request.json
• Run housectl authz can-i request-denied.json.
• You have now completed the first Housecarl authorization workflow.

Here are some things to try next:

Set a policy that grants usage to a specific group, rather than a specific user.

Set a policy that grants usage for a resource that contains the username of the user.

Unbundle a JWT token and map a specific claim to a policy.

Purchase a limited trial license for $0.00 to install on-prem.

Design Intention

Housecarl AuthZ is intended to handle complicated authorization use cases. Technical cases that you should consider Housecarl for include:

• Multiple teams with dichotomous permission models
• Matrix permission structures with cross cutting roles.
• Implementation of multi level security (MLS) deployments.
• Fine grained permission systems
• Easy integration with Apache Keycloak(Future Feature)

Business cases that you should consider Housecarl for include:

• Supported software (SaaS or self hosted)
• Reduces time to market: AuthZ is complicated, and we tackle the hardest cases. We know your developers can do the easy ones. Let us do the hard ones, and do it right in an off-the-shelf way.
• Aligned incentive structure - our success is your success.
• On premise/self hosted permission management, letting your admins manage risk in accordance with your policies.