# Quis, quid, cur, quomodo, ubi, quando, quibus auxiliis

- Link: https://www.agilicus.com/quis-quid-cur-quomodo-ubi-quando-quibus-auxiliis/
- Published: 2021-05-06T22:29:27+00:00
- Author: Don Bowman

Grade 10 English. We learned the W5/6 (Who, What, Why, When, Where, How). Its a 
common framework to, well, frame something. So i thought, why not apply it to the
problem domain at hand: [Zero Trust Networking](https://zero-trust.ca/).

Who, Authentication, Identity: This is how we identify a user. We use a first class
identity provider that already exists (Azure, Google, Apple, Okta, Auth0, etc). 
No sense making [yet another password](https://www.agilicus.com/identity-sprawl-shadow-it/).
Trust the upstream identity provider.

What, Authorisation. This is what you are allowed to do. Trust the upstream identity
provider but verify, control. This is owned by our customer.

How, Access. After I know who you are, and what you are allowed to do, the next 
step is to make it happen. This is where the magic occurs, we intersect the Who 
with the What, and them make it transparent.