Software-defined automation based on the open Margo standard

Part 2: Security analysis and the Margo Identity and Authorisation Framework (MIAF) in industrial group-wide deployment

Abstract

This article analyses the security architecture of Margo-compliant edge platforms in line with the research questions set out in Part 1 (published in atp magazin 6-7/2026). The focus is on the Margo Identity and Authorisation Framework (MIAF) from Preview Release 2 (PR2), which elevates the identity basis of local trust relationships per management
instance to a trust-domain-wide SPIFFE architecture with X.509 SVIDs and mTLS. The analysis maps MIAF against the Foundational Requirements FR1 to FR3 and FR7 of IEC 62443-3-3 and derives a deployment recommendation, including a security level suitability assessment, for the migration path from PR1 to PR2.