- Community - mailman.kantarainitiative.org

Some Interesting Tweets re: MITREid, IDESG, NSTIC, ID.me, and Kantara
by Joni Brennan 06 Aug '13

06 Aug '13

Hello - We realize that some people tweet, others email, while others "do social" (FB and LinkedIn etc). We wanted to capture a couple of interesting tweets as of late for those of you who may not use twitter regularly. Please feel free to share the items below with your networks and colleagues. 1. #MITREid is the latest #Kantara CSP Approved at LoA1 - Congrats to MITREid!! http://bit.ly/ki-csp-mitreid 2. @NSTICNPO blog calls out #Kantara Initiative recognizing recent trends in verifying ID Ecosystem models. Read More http://bit.ly/17p29WH 3. Thanks to #Kantara member @TroopID / @IDme on @FedNewsRadio talking #Kantara, #nstic , and #idesg >> listen http://bit.ly/17Yvlpz Best Regards, Joni Brennan

1 0

Of Possible Interest: Kantara participates in CA Luminaries Series - 5 minute high impact tech talks
by Joni Brennan 02 Aug '13

02 Aug '13

Dear Kantara Initiative community, Kantara had the pleasure of taking part in a series of 5 minute technology talks hosted by CA as part of their Luminaries program. If you've not heard about it and would like to browse the talks please visit: http://www.ca.com/us/content/page/Innovation-Imperative/Luminaries-Take-5.a… The speakers participating were excellent and we certainly enjoyed the opportunity to participate! The talk we gave for Katnara was focused on healthcare reform and why Federated Identity, Security, and Privacy tech and policy adoption are going to move at lightening speed in the time ahead. Thanks to CA for the opportunity to share our experiences in Federated IdM regarding healthcare! Best Regards, Joni

2 1

Crowd Tilt - UMA and OpenID Connect plug-ins for Apache
by Joni Brennan 30 Jul '13

30 Jul '13

Of Kantara Community Interest... If you've been contributing or even tracking the development of User Managed Access in the Kantara UMA Group then you already know the momentum of UMA and the unique place that it holds for usability of OAuth 2, OpenID Connect and beyond. Recent developments have been swelling around the fostering of a web server plug in approach to drive adoption, use case realization, and more. I won't go on to much further because our friends at Gluu have done a great job summarizing the current opportunities. Even better - they've kicked off a crowd funding campaign to support the ability to put concrete action in motion! Learn about how you can join the effort from the details and link below. Finally if you have a Kantara Initiative touching effort you'd like us to consider socializing via our channels please don't hesitate to reach to me. We're love to support the efforts of our members and community! ----- From: http://www.gluu.co/.grrn ----- It would be so awesome if we (meaning the citizens of the Internet) had plugins for popular web servers to make it easier to use OAuth2 to authenticate a person, and to authorize them to access certain URLs. The web server plugin is a tried and true approach to protecting web resources (both files and APIs...) without requiring a Web programmer to know much about complex authentication and authorization protocols. Shibboleth, the most widely adopted open source SAML platform, uses this approach for its Shibboleth SP software. According to the Netcraft survey in April 2013, Apache HTTPD had 54% of the web server market, approximately 341M servers. Take out Google’s 23M servers, and the number is even higher. Its a good place to start. To date, open source web server plugins have delivered on authentication, not authorization. Large companies can afford to buy expensive software for authorization from companies like CA, Oracle and IBM. These monolithic enterprise software vendors write web server plugins that used proprietary protocols to register and communicate with a central policy server. However, because of their price, most web developers just do without central authorization. Thanks to the hard work of the UMA community, a profile of OAuth2 has been defined to accomplish authorization. OX has implemented this standard, enabling organizations to define their access policies using Java, Python, or web services. Gluu has agreed to implement an open source java client (“OXD”) that can be deployed locally on the web server to handle the OAuth2 messaging. The only piece that is missing is the plugin to the web server. This project will actually deliver two OAuth2 plugins for Apache HTTPD server: (1) a plugin for OpenID Connect to handle the OAuth2 authentication (2) a plugin for for UMA, to handle the OAuth2 authorization. The design for the UMA plugin is documented on the OX Project wiki: http://www.gluu.co/.glcw Gluu has identified a resource to work on the project. In his cover letter, he wrote : “I have been working on writing apache modules for a reverse proxy product to provide single sign functionality. I've worked on projects to develop 10 custom modules to address the business needs of our product. I even have working knowledge on open source apache modules such as mod_proxy, mod_proxy_http, mod_cache, mod_disk_cache etc and having thorough understanding on apr library , pools.." This is a new funding model for us. We’re hoping that companies and integrators who want to see more options for open source authentication and authorization will support the effort. The intent is to donate the code produced by this effort to a non-profit, such as the Kantara Foundation, who could help develop a self-sustaining business model to fund future upgrade and fixes for the Apache plugin, and to create plugins for other web servers like IIS, nginx, or even popular CMS / CRM platforms such as WordPress and SugarCRM. In this way, this project could kickstart a new development ecosystem which will ultimately make the Internet a safer place for everyone.

1 0

Fwd: [WG-eGov] ICAM Job Opportunities at SSA
by Joni Brennan 29 Jul '13

29 Jul '13

Dear Community, The enclosed opportunity that may be of interest. Best Regards, Joni Brennan Kantara Initiative | Executive Director Building Trusted Identity Ecosystems - It takes a village! Slides: http://bit.ly/ki-june-2013 ---------- Forwarded message ---------- Date: Wed, Jul 24, 2013 at 5:28 AM Subject: [WG-eGov] ICAM Job Opportunities at SSA *Kantara Initiative Members**, please share with your smart contacts interested in serving their fellow citizens: * The Social Security Administration, located in Baltimore, is looking to fill a few information security positions fairly soon. We have direct-hire authority; please send your resume to SSA (i.e., these jobs are not posted on USAJOBS). We are looking to hire at the GS-9, GS-11, GS-12 or GS-13 levels depending on experience and education; in particular, SSA is looking for the following skills sets for various vacancies: *Positions in Identity, Credential, and Access Management (ICAM):* - Individuals with experience in automating ICAM processes. - Workflows in Identity Management platforms - JAVA developers with experience developing secure applications - NET developers with experience developing secure applications - Individuals that have taken paper-based information security processes and converted to electronic applications. *Positions in Policy and in Technical Operations:* - Individuals with strong analytical skills to work in a team environment while assisting agency stakeholders with the identification and mitigation of information security weaknesses. - Individuals with strong technical writing skills to work in a team environment on developing information security awareness training materials and procedures with an agency-wide focus. - Individuals with experience researching and developing new or improved information security policies and procedures. - Individuals with experience conveying information security policies and procedures clearly and concisely in written and verbal format. - Individuals with experience in developing information security procedures and systems for establishing and assessing the effectiveness of administrative controls designed to prevent waste, loss or unauthorized use. *Positions in fraud prevention:* - Individuals with experience in examining fraud in the public or private sector. - Individuals with experience conducting fraud detection activities such as following data trails and reviewing digital evidence. - Individuals with experience conducting computer forensics analysis in support of fraud examination - Individuals with experience effectively communicating forensics and fraud findings in a written and verbal manner. For those at the entry level, we have a career ladder position, which comes with 2-years of in-house training to help new cyber security professionals get on-the-job training & mentoring as they "break into" the field as a career. I’ve attached some background information about SSA and our office. If interested, please have candidates send their application to Marci Elkin, (Office of Information Security) at *marci.elkin(a)ssa.gov*<marci.elkin(a)ssa.gov?subject=ICAM%20Job%20Opportunities>for immediate consideration. Sincerely, Jack Leipold -- Director, Division of Identity, Credential, and Access Management _______________________________________________ WG-eGov mailing list WG-eGov(a)kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/wg-egov

1 0

Server maintenance on July 25/26, 2013
by Oliver Maerz 17 Jul '13

17 Jul '13

In an effort to provide reliable Kantara Initiative web based services our servers will be upgraded on July 25 and 26, 2013. During the maintenance the websites will be temporarily offline. Please let me know if you have any questions regarding the upgrade/maintenance. Thanks, Oliver -- *Oliver Maerz* External Consultant *Kantara Initiative* +1 (503) 468-4188 oliver (at) kantarainitiative.org http://www.kantarainitiative.org The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. No representation is made on its accuracy or completeness of the information contained in this electronic message. Certain assumptions may have been made in the preparation of this material as at this date, and are subject to change without notice. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. Please reply to Oliver Maerz and destroy all copies of this message and any attachments from your system.

1 0

Kantara Spotlight on ... you!
by Joni Brennan 25 Jun '13

25 Jun '13

Hello Kantara Community, Did you know that we recently put the Kantara Spotlight on Kantara Members TroopID (http://kantarainitiative.org/spotlight-on-kantara-member-troop-id/) If you're a Kantara Member and would like us to put the Spotlight on you please let me know. We're looking forward to Spotlighting the great work of your organization! Best Regards, Joni Joni Brennan Kantara Initiative | Executive Director voice:+1 732-226-4223 email: joni @ kantarainitiative.org Building Trusted Identity Ecosystems - It takes a village! Slides: http://bit.ly/ki-june-2013

1 0

Kantara Response to FTC IoT Privacy and Security Implications
by Joni Brennan 13 Jun '13

13 Jun '13

Dear Kantara Community, Recently Kantara Initiative Trustees, Members and Participants provided their international and industry expertise to develop a brief response to a call for input by the US Federal Trade Commission (FTC) [1] regarding privacy and security implications of the Internet of Things (IoT). Pervasive implementation the IoT, and access control of associated data, will have significant implications with regard to Identity Management use cases and beyond. Kantara Initiative intends to address these implications through its network of experts and programs. The full response can be read on our Kantara blog [2]. We thank our stakeholders for their excellent input and we're looking forward to a workshop focusing on IoT that is being planned by FTC for the fall 2013. Please feel free to share the response with interested parties. We are very interested to hear feedback that can be shared on this list or via our contact form [3]. Joni Brennan Executive Director Kantara Initiative [1] http://www.ftc.gov/opa/2013/04/internetthings.shtm [2] http://kantarainitiative.org/privacy-and-security-iot/ [3] bit.ly/contact_kantara

7 18

The individual as an axiom (for the emergence of identity)
by Owen Thomas 27 May '13

27 May '13

Hello again. I've disclosed another piece on my blog about my belief that the individual is the underpinning axiom behind identity; a concept which I think the identity communities here and society in general are yet to accept and embrace. My Clique Space(TM) concept is ultimately based on the abstract notion of the individual - the only entity in this world which has the capability of making assertions. The individual is expressed in Clique Space as a collection of Clique Space Elements which are used to organise and project an individual's identity thorugh any type of device one wishes one's presence to be known. I hope you might find that what I'm trying to put together piques interest in what you're doing. Owen. -- Employment-from-home. Make mine part-time. Yes you can. Software developers certainly can be salaried and superannuated part-time from home. Make it so for this one. Clique Space(TM): A seat for the soul. www.owenpaulthomas.blogspot.com

1 0

Server maintenance on May 27, 2013
by Oliver Maerz 27 May '13

27 May '13

In an effort to provide reliable Kantara Initiative web based services our servers will be upgraded later tonight. Starting 6 pm pacific websites and email will be temporarily offline. Please let me know if you have any questions regarding the upgrade/maintenance. Thanks, Oliver -- *Oliver Maerz* External Consultant *Kantara Initiative* +1 (503) 468-4188 oliver (at) kantarainitiative.org http://www.kantarainitiative.org The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. No representation is made on its accuracy or completeness of the information contained in this electronic message. Certain assumptions may have been made in the preparation of this material as at this date, and are subject to change without notice. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. Please reply to Oliver Maerz and destroy all copies of this message and any attachments from your system. -- *Oliver Maerz* External Consultant *Kantara Initiative* +1 (503) 468-4188 oliver (at) kantarainitiative.org http://www.kantarainitiative.org The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. No representation is made on its accuracy or completeness of the information contained in this electronic message. Certain assumptions may have been made in the preparation of this material as at this date, and are subject to change without notice. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. Please reply to Oliver Maerz and destroy all copies of this message and any attachments from your system.

1 0

Server maintenance on May 25, 2013
by Oliver Maerz 25 May '13

25 May '13

In an effort to provide reliable Kantara Initiative web based services our servers will be upgraded later tonight (Saturday, May 25, 2013). During the maintenance the websites and email may be temporarily offline. Please let me know if you have any questions regarding the upgrade/maintenance. Thanks, Oliver -- *Oliver Maerz* External Consultant *Kantara Initiative* +1 (503) 468-4188 oliver (at) kantarainitiative.org http://www.kantarainitiative.org The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain confidential or privileged information. No representation is made on its accuracy or completeness of the information contained in this electronic message. Certain assumptions may have been made in the preparation of this material as at this date, and are subject to change without notice. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this e-mail and any attachment(s) is strictly prohibited. Please reply to Oliver Maerz and destroy all copies of this message and any attachments from your system.

1 0