Authorizers serves as Policy Enforcement Points (PEP) connecting PlainID Authorization engine with customer's specific technologies, such as API Gateways, Service Meshes, Data Solutions, Legacy Systems etc. Read more about PlainID Authorizers here https://docs.plainid.io/docs/authorizers.
The Authorizers integrate with different technologies and serve different Authorization use cases. Two main types:
- API Authorizers – Enforcing API Access use cases in API Gateways, Service Meshes, ensuring authorized use of APIs based on Policies.
- Data Authorizers – Enforcing Data Access control for data platforms, ensuring row-, column-, or object-level access based on Policies.
Authorizers are defined and downloaded from the Environment Settings, following deployment and configuration on the customer's infrastructure based on the integrated technology. Each Authorizer includes vendor-specific settings, such as connection details or runtime deployment parameters, that enable it to communicate with the PlainID PDP and enforce authorization outcomes.
You can view each Authorizer and their details in the Authorizers section.
Adding a New Authorizer
To add a new Authorizer
- In the left panel, click Environment Settings.
- Click on the Authorizers Tile.
- Click + New Authorizer.
- In the General Details section, select the relevant vendor from the dropdown list.
- Enter a name for the Authorizer, for example:
Account Authorizer
. - Provide a short description of the Authorizer’s purpose. (optional)
- Click Create to add the Authorizer.
Once created, the Authorizer ID and a download package specific to the selected vendor will appear.
Editing an Authorizer
You can edit an existing Authorizer to update its general details.
To edit an Authorizer
- Select the Authorizer you want to edit from the list.
- Click Edit in the top-right corner of the screen.
- Update the Name or Description fields as needed.
- Click Save to apply the changes.
Deleting an Authorizer
To delete an Authorizer
- Hover over the Authorizer you want to delete from the list.
- Click on the trash icon.
- A confirmation message appears. Click Delete to continue.
Available Authorizers
You can configure the following Authorizers from the list:
- Access File Authorizer
- Apigee
- Amazon API Gateway
- Istio
- SQL Modifier
- JSON Filtering
- Google BigQuery
- Denodo
- Trino