December 2011 - Community - mailman.kantarainitiative.org

Authentic 2 is out!
by Mikaël Ates 23 Dec '11

23 Dec '11

Dear all, Entr'ouvert is pleased to announce the release of Authentic 2. Authentic 2 is a versatile and compliant identity management plateform whose main features are: Identity provider and service provider SAML 2.0 Server CAS 1.0 and 2.0 Identity provider and relying party OpenID 1.0 et 2.0 Standards authentication mechanisms: Simple password One-time password (OATH and Google-Authenticator) X509 certificate over SSL/TLS Protocol proxying, for instance between OpenID and SAML Support of LDAP v2 and v3 directories Support of PAM as a backend Identity attribute management Project website: http://dev.entrouvert.org/projects/authentic Git repository: http://repos.entrouvert.org/authentic.git Tarball: http://pypi.python.org/pypi/authentic2 Documentation: http://lycope.entrouvert.org/documentation/authentic2 Authentic 2 is a free software published under the GNU AGPLv3 license. Authentic 2 is deployed at www.identity-hub.com, a free and open identity provider. Best regards, Mikaël Ates Entr'ouvert

1 0

IMPORTANT: Change in Kantara Initiative Teleconference Bridge Service effective Jan. 1, 2012
by Dervla O'Reilly 19 Dec '11

19 Dec '11

All, As of December 31, 2011 Kantara Initiative will no longer utilize HiDef Conferencing as a teleconference provider due to discontinuation of the service. On January 1, 2012 we will begin using TurboBridge as our new teleconference provider. This service is an audio-only based platform and works well with Skype. After a testing the service we are confident that this will be a good replacement for our needs. A few things to note: Teleconference and dial-in details will be updated on group and Trustee home pages on January 1, 2012 Calendar entries from January 1, 2012 already reflect new dial-in details: http://kantarainitiative.org/wordpress/calendar/ Please let us know if you have any questions. Happy holiday season to you. Dervla ________________________ Dervla O’Reilly Program & Event Manager Kantara Initiative +1 415 731 4487 business +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

1 0

Kantara Initiative Scheduled Maintenance on December 16, 11:00-2:00 PM Pacific
by Oliver Maerz 12 Dec '11

12 Dec '11

In an effort to provide a reliable and secure Kantara Initiative Wiki we will update our wiki software "Confluence" on Friday, December 16, 2011. This update will unfortunately require some downtime of the Kantara Initiative Wiki (http://kantarainitiative.org/confluence/) We will of course try to keep the downtime to a minimum. Other parts of the site like Wordpress (http://kantarainitiative.org/wordpress/) mailman etc. will NOT be affected by the upgrade. Maintenance will begin at: 11:00 PM Pacific (2:00 PM Eastern) Maintenance will end at: 2:00 PM Pacific (5:00 PM Eastern) Please let me know if you have any questions regarding the update/maintenance. Thanks, Oliver

1 0

Announcing re-election and new leadership for Kantara Initiative’s eGovernment Work Group
by Dervla O'Reilly 09 Dec '11

09 Dec '11

Please join us in congratulating re-elected leadership of Kantara Initiative’s eGovernment Work Group Rainer Hoerbe, Chairman Colin Wallis, Vice Chairman Keith Uber, Secretary The eGovernment Work Group is responsible for: Facilitating collaboration and discussion among Kantara members with an interest in eGovernment identity management applications and services Acting as a forum to discuss best practices by government organizations on national, regional and municipal levels Presenting “a government view” into other Kantara Initiative Work Groups so that these views may be taken into account in the development of Kantara Initiative Policy – Recommendations and Specifications for future contribution to an appropriate Standards Setting Organization Promoting the development, adoption and support for eGovernment deployment profiles of open specifications Many thanks to Colin Wallis for leading the Work Group over the past few years. We look forward to his continued support alongside Rainer Hoerbe and Keith Uber in moving the work of this group and Kantara forward. Join the eGoverment Work Group: http://signup.kantarainitiative.org/?selectedGroup=15 Review the Charter: http://kantarainitiative.org/confluence/display/eGov/Charter Mail list and Archives: http://kantarainitiative.org/pipermail/wg-egov/ Copyright Policy: Kantara Initiative IPR Policy – Creative Commons Share-Alike Attribution ________________________ Dervla O’Reilly Program & Event Manager Kantara Initiative +1 415 731 4487 business +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

1 0

Announcing re-election for Kantara Initiative’s Federation Interoperability Work Group
by Dervla O'Reilly 08 Dec '11

08 Dec '11

Please join us in congratulating re-elected leadership of Kantara Initiative’s Federation Interoperability Work Group John Bradley will serve as the group Chair for another one-year term. The Federation Interoperability Work Group was formed within the Kantara Initiative to profile existing specifications to define an interoperable trust infrastructure for use by parties participating in Trust Frameworks. This will allow entities to determine the certification status and configuration parameters of entities outside of their local federation. Join the Federation Interoperability Work Group: http://signup.kantarainitiative.org/?selectedGroup=24 Review the Charter: http://kantarainitiative.org/confluence/display/fiwg/Charter Mail list and Archives: https://groups.google.com/group/wg-fi?hl=en Copyright Policy: Kantara Initiative IPR Policy – Creative Commons Share-Alike Attribution We offer our support and congratulations again to John as he continues to carry the work of the group and Kantara forward. ________________________ Dervla O’Reilly Program & Event Manager Kantara Initiative +1 415 731 4487 business +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

1 0

Join us for a UMA Webinar, Dec. 14, 2011 at 10am PT
by Dervla O'Reilly 07 Dec '11

07 Dec '11

“What is UMA and why do we need it?” In a nutshell, User-Managed Access (UMA) is… A web protocol that lets you conveniently control who gets access to all your online stuff, no matter where it lives and no matter whether you’re online at the moment A Work Group of the Kantara Initiative that is free for anyone to join and contribute to A set of draft speciﬁcations that is free for anyone to implement UMA is needed by… Individuals, to give them a “personal data concierge” that handles requests for access to their online data, content, and services Websites, to enable them to offer sophisticated data-sharing features to their users without having to implement those features natively Online identity providers, to offer their users the ability to set access policies from a single place even if those users engage with dozens or hundreds of sites and apps on a regular basis This webinar will… Discuss real-life use cases for UMA Demonstrate UMA implementations Review UMA’s architecture and its relationship to the OAuth and OpenID Connect specifications Register now UMA WG details ________________________ Dervla O’Reilly Program & Event Manager Kantara Initiative +1 415 731 4487 business +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

1 0

Kantara Initiative grants Accreditation to Deloitte & Touche LLP, and, eValid8, and Approves Verizons Universal Identity Service at LoA3
by Dervla O'Reilly 05 Dec '11

05 Dec '11

Dec. 5, 2011 Piscataway, NJ - Kantara Initiative announces the accreditation of two assessors, Deloitte & Touche LLP [1] and eValid8 [2], who are now qualified to perform assessments for the Kantara Identity Assurance Framework for both the Identity Credential and Access Management (ICAM) and non-ICAM Trust Frameworks. Additionally, Kantara Initiative announced the first high Level of Assurance (LoA) Kantara Service Approval (recognized as ICAM Certification) has been granted to Verizon’s Universal Identity Service at LoA 1-3 non-PKI for use to access U.S. Government online services. (See related press release [3].) “eValid8 welcomes the challenge of aligning industry providers with this unilateral approach to assuring that business, governments, and end users can conduct business with equivalent credentials” said Brian Dilley, President. eValid8® offers audited solutions such as TrustedCA®, TrustedRA®, and Kantara Initiative Accreditation for trusted identity assurance. “With this certification, Verizon is at the forefront of driving a new identity ecosystem that better protects users and organizations,” said Peter Tippett, vice president of Verizon. “Using our Kantara-approved credentials, we can offer businesses and government agencies more choices in securing their digital identities with our easy to deploy and use identity services that have now been certified to Level 3.” The ICAM program is seen by industry veterans as the first implementation of a model to build the Identity Ecosystem which is described in the National Strategy for Trusted Identities in Cyberspace (NSTIC), which aim to create a trusted Identity Ecosystem that uses trusted-industry issued credentials to access U.S. Federal Government Services. Trust is measured via the certification programs of U.S. Government Trust Framework Providers (TFPs). Kantara Initiative is the only US Government TFP authorized to perform Service Approvals at Levels of Assurance (LoAs) 1, 2 and 3 (non-PKI) of services to connect industry-issued credentials with US Government Services. The market for high LoA credentials has since further developed by an Office of Management and Budget (OMB) memo [4] issued to U.S. Chief Information Officers (CIOs) that requires LoA 1 certified credentials be implemented for new government service web sites within 90 days of the first TFP final approval or when existing websites are enhanced or upgraded and LoA 2 and 3 non-crypto certified credentials be adopted for higher value U.S. Government agency services within the near term. The Kantara Identity Assurance Accreditation and Service Approval Program assesses applicants against its strict criteria ensuring, among other things, alignment with the OMB 04-04 and NIST 800-63 LoAs [5] and grants successful candidates of the program the right to use the Kantara Initiative Mark, a symbol of trustworthy identity and credential management services at specified Assurance Levels. Kantara Initiative is currently accepting appropriate applications to Accredit Assessors and Approve Credential Service Providers (CSPs) (a.k.a. Identity Providers – IdPs) to issue certified credentials for the ICAM Trust Framework. Additionally, the broad and unique cross section of industry and multi-jurisdictional stakeholders within the Kantara Membership, have the opportunity to create profiles that add additional criteria to the core Identity Assurance Framework for applicability to their specific communities of trust. For further information or to become Kantara Accredited or Approved (ICAM Certified), please visit our Kantara Accreditation and Approval Center [6] and contact support(a)kantarainitiative.org. About Kantara Initiative: Kantara Initiative is a global, open, public-private, technology-agnostic forum comprised of identity ecosystem stakeholders. Its inspired mission is to promote federation interoperability and harmonization; to develop policy frameworks for operational interoperability and to provide certification and assessment programs to grow trust in the standards, products, and service deployments. For more information about getting involved in Kantara Initiative, visit http://kantarainitiative.org. [1] http://www.deloitte.com/view/en_US/us/Services/audit-enterprise-risk-servic… [2] http://www.evalid8.com [3] http://www.verizonbusiness.com/about/news/displaynews.xml?newsid=25849&mode… [4] http://www.cio.gov/documents/OMBReqforAcceptingExternally_IssuedIdCred10-6-… [5] http://csrc.nist.gov/publications/nistpubs/800-63/SP800-63V1_0_2.pdf [6] http://bit.ly/Kantara_Assurance_Accreditation_Approval ________________________ Dervla O’Reilly Program & Event Manager Kantara Initiative +1 415 731 4487 business +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

1 0