January 2012 - DG-AM - mailman.kantarainitiative.org

FYI: since we're talking about SCIM...
by Heather Flanagan 31 Jan '12

31 Jan '12

A new IETF non-working group email list has been created. List address: scim(a)ietf.org Archive: http://www.ietf.org/mail-archive/web/scim/ To subscribe: https://www.ietf.org/mailman/listinfo/scim Purpose: Discussion about potential formation of an IETF WG for Simple Cloud Identity Management (SCIM). For additional information, please contact the list administrators.

5 5

Link for today's presentation from Chris Phillips
by Anna Ticktin 31 Jan '12

31 Jan '12

> From: Chris Phillips <Chris.Phillips(a)canarie.ca> > Date: 31January2012 11:06:56 AM PST > To: "anna(a)kantarainitiative.org" <anna(a)kantarainitiative.org> > Subject: link to presentation > > http://slidesha.re/scim2012q1

1 0

Re: REMINDER & AGENDA: DGAM Telecon Tuesday 31 January 2012 11h PT / 14h ET / 19h UTC
by HAZELTON＠WISC.EDU 31 Jan '12

31 Jan '12

I will be 20 minutes late to call--meeting running over. Sent from my Verizon Wireless Phone ----- Reply message ----- From: "Heather Flanagan" <hlflanagan(a)internet2.edu> Date: Mon, Jan 30, 2012 08:15 Subject: [DG-AM] REMINDER & AGENDA: DGAM Telecon Tuesday 31 January 2012 11h PT / 14h ET / 19h UTC To: <dg-am(a)kantarainitiative.org> Cc: "Chris Phillips" <Chris.Phillips(a)canarie.ca> Agenda is posted online: http://kantarainitiative.org/confluence/display/AMDG/AMDG+Meeting+AGENDA+31… Note that call will be recorded so I can come back and take notes later. Sorry I'll miss it! -Heather _______________________________________________ DG-AM mailing list DG-AM(a)kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/dg-am

2 1

REMINDER & AGENDA: DGAM Telecon Tuesday 31 January 2012 11h PT / 14h ET / 19h UTC
by Heather Flanagan 30 Jan '12

30 Jan '12

Agenda is posted online: http://kantarainitiative.org/confluence/display/AMDG/AMDG+Meeting+AGENDA+31… Note that call will be recorded so I can come back and take notes later. Sorry I'll miss it! -Heather

1 0

OIX AX Charter and Overview
by Salvatore D'Agostino 26 Jan '12

26 Jan '12

dg, Please find link to documents via OIX AX Google Group. http://groups.google.com/group/oix-ax-working-group/browse_thread/thread/b86 1f67e26a179c1?hl=en b/r s

1 0

SCIM brief
by Salvatore D'Agostino 25 Jan '12

25 Jan '12

DG, I spoke to Chris Phillips after the SCIM call today, when the request for a DG brief was taken up on their agenda, he mentioned that Keith had reached out to him to talk to the DG and he would do so on the next call 31 January. The Google group is here: http://groups.google.com/group/cloud-directory Agenda for call, per usual to follow. Regards, Sal

1 0

Cross Operator Project Proposal
by Ingo.Friese＠telekom.de 24 Jan '12

24 Jan '12

Dear colleagues, Deutsche Telekom Laboratories intends to setup cross-operator R&D project in Identity Management. Main topics are authentication, attribute exchange, Telco-trust frameworks. Please find attached the project proposal for further information about topics and procedures. If you are interested in one or more topics it would be great if you contact me. Ingo.Friese(a)telekom.de Kind regards, Ingo Feel free to forward this message to other groups or contacts. PS: We decided to do it not as an EU-project because we think this would be too much overhead and we want to include also Non-European partners. Viele Grüße Ingo Friese Deutsche Telekom AG T-Labs (Research & Innovation) Ingo Friese Winterfeldtstr. 21, 10781 Berlin +4930835358148 (Tel.) +49391580216849 (Fax) E-Mail: ingo.friese(a)telekom.de www.telekom.com Erleben, was verbindet. Deutsche Telekom AG Aufsichtsrat: Prof. Dr. Ulrich Lehner (Vorsitzender) Vorstand: René Obermann (Vorsitzender), Dr. Manfred Balz, Reinhard Clemens, Niek Jan van Damme, Timotheus Höttges, Edward Kozel, Claudia Nemat, Thomas Sattelberger Handelsregister: Amtsgericht Bonn HRB 6794 Sitz der Gesellschaft: Bonn WEEE-Reg.-Nr. DE50478376 Große Veränderungen fangen klein an - Ressourcen schonen und nicht jede E-Mail drucken.

2 1

Member-List Test
by Anna Ticktin 23 Jan '12

23 Jan '12

Hello folks— Pardon the interruption as we conduct a test via the list to our new member, Joanne Knight. You all can ignore this message, save Joanne—confirm receipt??? Regards —> Anna Ticktin anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

FW: [ABA-IDM-TASK-FORCE] Call-In and WebEx Access for Meeting - Friday January 13
by Salvatore D'Agostino 19 Jan '12

19 Jan '12

From: Federated Identity Management Task Force Discussion [mailto:BL-FIDM@MAIL.AMERICANBAR.ORG] On Behalf Of Smedinghoff, Tom Sent: Saturday, January 07, 2012 12:46 PM To: BL-FIDM(a)MAIL.AMERICANBAR.ORG Subject: [ABA-IDM-TASK-FORCE] Call-In and WebEx Access for Meeting - Friday January 13 We have arranged for call-in and WebEx access for Task Force meeting on January 12-13. For those interested in calling in, information is below. NOTE: the information below applies only to Friday, January 13. A separate email will provide the information for Thursday January 12. Hello , Tom Smedinghoff invites you to attend this online meeting. Topic: ABA Identity Management Legal Task Force Date: Friday, January 13, 2012 Time: 9:00 am, Eastern Standard Time (New York, GMT-05:00) Meeting Number: 686 302 381 Meeting Password: ABAimltf0113 ------------------------------------------------------- To join the online meeting (Now from mobile devices!) ------------------------------------------------------- 1. Go to <https://edwardswildman.webex.com/edwardswildman/j.php?ED=135395112&UID=0&PW =NZjljNWYxM2Qy&RT=MiMxMQ%3D%3D> https://edwardswildman.webex.com/edwardswildman/j.php?ED=135395112&UID=0&PW= NZjljNWYxM2Qy&RT=MiMxMQ%3D%3D 2. If requested, enter your name and email address. 3. If a password is required, enter the meeting password: ABAimltf0113 4. Click "Join". To view in other time zones or languages, please click the link: <https://edwardswildman.webex.com/edwardswildman/j.php?ED=135395112&UID=0&PW =NZjljNWYxM2Qy&ORT=MiMxMQ%3D%3D> https://edwardswildman.webex.com/edwardswildman/j.php?ED=135395112&UID=0&PW= NZjljNWYxM2Qy&ORT=MiMxMQ%3D%3D ------------------------------------------------------- To join the teleconference only ------------------------------------------------------- DIAL-IN INFORMATION US 1-800-689-9374 INTERNATIONAL 001-719-457-0613 Participant Passcode: 251621 ------------------------------------------------------- For assistance ------------------------------------------------------- 1. Go to <https://edwardswildman.webex.com/edwardswildman/mc> https://edwardswildman.webex.com/edwardswildman/mc 2. On the left navigation bar, click "Support". You can contact me at: <mailto:tsmedinghoff@edwardswildman.com> tsmedinghoff(a)edwardswildman.com To add this meeting to your calendar program (for example Microsoft Outlook), click this link: <https://edwardswildman.webex.com/edwardswildman/j.php?ED=135395112&UID=0&IC S=MI&LD=1&RD=2&ST=1&SHA2=5rVoaEjT-Zyl0IsQBPEKjax8Dec42Rkjlgrs4ZHQG/g=&RT=MiM xMQ%3D%3D> https://edwardswildman.webex.com/edwardswildman/j.php?ED=135395112&UID=0&ICS =MI&LD=1&RD=2&ST=1&SHA2=5rVoaEjT-Zyl0IsQBPEKjax8Dec42Rkjlgrs4ZHQG/g=&RT=MiMx MQ%3D%3D The playback of UCF (Universal Communications Format) rich media files requires appropriate players. To view this type of rich media files in the meeting, please check whether you have the players installed on your computer by going to <https://edwardswildman.webex.com/edwardswildman/systemdiagnosis.php> https://edwardswildman.webex.com/edwardswildman/systemdiagnosis.php Sign up for a free trial of WebEx <http://www.webex.com/go/mcemfreetrial> http://www.webex.com/go/mcemfreetrial <http://www.webex.com> http://www.webex.com IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation. Edwards Wildman Logo <http://www.edwardswildman.com/files/upload/EdwardsWildman-RGB-2in.gif> The partnerships of Edwards Angell Palmer & Dodge LLP and Wildman, Harrold, Allen & Dixon LLP merged on October 1, 2011. The new firm is known as Edwards Wildman Palmer LLP. For more information visit edwardswildman.com. _______________________ Boston, Chicago, Ft. Lauderdale, Hartford, London, Los Angeles, Madison NJ, New York, Newport Beach, Providence, Stamford, Tokyo, Washington DC, West Palm Beach, Hong Kong (associated office) CONFIDENTIALITY NOTICE This e-mail message from Edwards Wildman Palmer LLP and Edwards Wildman Palmer UK LLP is intended only for the individual or entity to which it is addressed. This e-mail may contain information that is privileged, confidential and exempt from disclosure under applicable law. If you are not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you received this e-mail by accident, please notify the sender immediately and destroy this e-mail and all copies of it. We take steps to protect against viruses but advise you to carry out your own checks and precautions as we accept no liability for any which remain. We may monitor emails sent to and from our server(s) to ensure regulatory compliance to protect our clients and business. Edwards Wildman Palmer UK LLP is a limited liability partnership registered in England (registered number OC333092) and is regulated by the Solicitors Regulation Authority. A list of members' names and their professional qualifications may be inspected at our registered office, Dashwood, 69 Old Broad Street, London EC2M 1QS, UK, telephone +44 207 583 4055. Disclosure Under U.S. IRS Circular 230: Edwards Wildman Palmer LLP informs you that any tax advice contained in this communication, including any attachments, was not intended or written to be used, and cannot be used, for the purpose of avoiding federal tax related penalties or promoting, marketing or recommending to another party any transaction or matter addressed herein. ______________________________________ Thank you for your continued interest in this list. A summary of your discussion list subscriptions, including BL-FIDM, can be found at http://apps.americanbar.org/elistserv/home.cfm . This new List Subscription Page allows you to manage your lists - unsubscribe from existing or join others. If you have any issues you may either contact the list owner via email: BL-FIDM-request(a)mail.americanbar.org , or the ABA Service Center at phone: 1-800-285-2221 or email: service(a)americanbar.org . ______________________________________

3 3

REMINDER & AGENDA: DGAM Telecon Tuesday 17 January 2012 11h PT / 14h ET / 19h UTC
by Heather Flanagan 17 Jan '12

17 Jan '12

Date and Time Date: Tuesday, 17 / 01 / 2012 Time: 11h PT / 14h ET / 19h UTC Apologies Sal D'agostino AGENDA: 1. Administrative a. Roll Call b. New member introduction c. Agenda confirmation d. Action item review 2. Feedback on info flowing in from list SPML - FERO mapping and demonstration. http://www.firstresponder.gov/FRBlog/Default.aspx Cross operator Project (Telco attributes) NISTIR - Revocation Gap http://csrc.nist.gov/publications/drafts/nistir-7817/Draft-NISTIR-7817.pdf --- Open Action Items Action Item Review : (*Action Items numbered as *YYYYMMDD-01 Assignee : description....) Action Item Assigned To Description Status Comments 20111108-04 all Review the eGov requirements and see what information can be used/discussed at next call In progress Holding pending Colin's attendance 20111206-03 Colin Report back as liaison with OASIS Trust Elevation In progress Bob submitted paper for pan-Canadian model as something like a use case for that group 20111220-01 Keith send notes on discussion of the Mapping workshop from the Internet2 MACE-Dir call 20111220-03 Sal update Current Industry Efforts to the OIX attribute working group and the OASIS trust elevation group In progress 20111220-05 Sal have an attribute gap session at IIW in January and report back 20111220-06 Sal report back on the "13+3" DOD attributes In progress Did not find this particular reference yet, but found others and added them to the repository 20111220-07 Heather have initial discussion group report ready by February 14 call In progress 20120103-02 Keith Update SCIM info in repository 20120103-02 Keith, Sal Talk to SCIM folks (Chris, Tre) for a brief chat on our call later in January, early February --- AOB Next Meeting Date: Tuesday, January 31, 2012 Time: 11h PT / 14h ET / 19h UTC Dial in: * Skype: +99051000000481 * US Dial-In: +1-805-309-2350 | Room Code: 613-2898

1 1

Conference call snafu
by Keith Hazelton 17 Jan '12

17 Jan '12

It seems the group's contract for conference calls expired at the end of the year. Plan B? --Keith Hazelton

2 1

Kantara Attribute Manasgement Discussion Group
by Salvatore D'Agostino 15 Jan '12

15 Jan '12

Hello, Glad to see first responder site and about the SPML - FERO mapping and demonstration. http://www.firstresponder.gov/FRBlog/Default.aspx Our discussion group is looking at attributes such as the F/ERO and would be very interested to know the attributes in the schema. I have had some previous links to the F/ERO and CIKR activity while at CoreStreet and have followed the activity of the technology transfer working group and first responder authentication credential efforts. We are reaching out to organizations to brief or listen during a weekly call http://kantarainitiative.org/confluence/display/AMDG/Calendar also see the minutes and repository of our activities. Thanks for a POC to follow up. Sincerely, Sal Salvatore D'Agostino, CSCIP Chair, Kantara Initiative Attribute Management Discussion Group IDmachines LLC |1264 Beacon Street, #5 | Brookline, MA 02446 | USA http:\\www.idmachines.com <http://www.idmachines.com/> | http:\\idmachines.blogspot.com <http://idmachines.blogspot.com/> | @idmachines +1 617.201.4809 ph | +1 617.812.6495 fax

1 0

FW: Cross operator Project
by Salvatore D'Agostino 13 Jan '12

13 Jan '12

Thanks Ingo. I appreciate the answer to a basic question. I have copied the group. From: Ingo.Friese(a)telekom.de [mailto:Ingo.Friese@telekom.de] Sent: Friday, January 13, 2012 11:32 AM To: sal(a)idmachines.com Subject: AW: Cross operator Project Thank you. I doubt that there is a listat least at DT. But it could be a nice objective of the project to recommend few.. In fact there a hundreds of attributes spread over different data stores in a Telco. Starting from home address of the contract owner up to the duration of the last phone call Von: Salvatore D'Agostino [mailto:sal@idmachines.com] Gesendet: Freitag, 13. Januar 2012 17:18 An: Friese, Ingo; gael.gourmelen(a)orange.com; jonas.k.o.hogberg(a)ericsson.com; thanh-van.do(a)telenor.com; joni(a)ieee-isto.org Cc: fulup(a)fridu.net; Keith.Uber(a)ubisecure.com Betreff: RE: Cross operator Project Thanks for the copy on this, looks like a very good idea and plan. Do you have a list of authoritative and other attributes in the AAA ID, it would be very helpful to the discussion group. From: Ingo.Friese(a)telekom.de [mailto:Ingo.Friese@telekom.de] Sent: Friday, January 13, 2012 9:54 AM To: gael.gourmelen(a)orange.com; jonas.k.o.hogberg(a)ericsson.com; thanh-van.do(a)telenor.com; joni(a)ieee-isto.org Cc: fulup(a)fridu.net; Keith.Uber(a)ubisecure.com; sal(a)idmachines.com Subject: Cross operator Project Hi, find attached the next version of the proposal. Please have a look at it and if you have any remark or something seems unclear please give feedback. You are a kind of Test person group. After your feedback Ill send this proposal out to several groups and organizations to find partners. I mentioned your Company/Organization (Ericsson, Orange, Telenor, Kantara) as potential project partners. I hope this is ok for you, since we had first talks about the project. If its not okplease contact me! Thank you in advance! Looking forward to have an interesting project with you! Best, Ingo Viele Grüße Ingo Friese Deutsche Telekom AG T-Labs (Research & Innovation) Ingo Friese Winterfeldtstr. 21, 10781 Berlin +4930835358148 (Tel.) +49391580216849 (Fax) E-Mail: ingo.friese(a)telekom.de www.telekom.com Erleben, was verbindet. Deutsche Telekom AG Aufsichtsrat: Prof. Dr. Ulrich Lehner (Vorsitzender) Vorstand: René Obermann (Vorsitzender), Dr. Manfred Balz, Reinhard Clemens, Niek Jan van Damme, Timotheus Höttges, Edward Kozel, Claudia Nemat, Thomas Sattelberger Handelsregister: Amtsgericht Bonn HRB 6794 Sitz der Gesellschaft: Bonn WEEE-Reg.-Nr. DE50478376 Große Veränderungen fangen klein an Ressourcen schonen und nicht jede E-Mail drucken.

1 0

Kantara Attribute Management Discussion group
by Salvatore D'Agostino 11 Jan '12

11 Jan '12

Thanks for the offer to discuss attribute management and SCIM on the call today. Our calendar is here, and the wiki has other information on our activity and desire to have a draft on topic out next month. http://kantarainitiative.org/confluence/display/AMDG/Calendar Let us know which one of these Tuesdays works for someone and we can put it on the agenda. Thanks again, Sal

1 0

Revocation Gap in Attribute Management
by Salvatore D'Agostino 10 Jan '12

10 Jan '12

This recent NISTIR makes a few points for possible reference/inclusion in draft report, I will add it to the repository. http://csrc.nist.gov/publications/drafts/nistir-7817/Draft-NISTIR-7817.pdf Sal

1 0

question about our charter
by Heather Flanagan 06 Jan '12

06 Jan '12

Hi all - As I'm working on compiling our notes and discussions in a set of recommendations, it occurs to me that we haven't really (as far as I know) talked about this part of our mandate: IDENTIFY: Kantara Initiative stakeholder requirements regarding Attribute Management. We have a lot of information about activities going on in the attribute management space in our repository, and we have a list of groups working on definitions, but do we actually have a list of what's actually required? Anyone have thoughts/opinions on this? -Heather

2 1

Notes from breakout session regarding attributes from the Mapping the Identity Ecosystem workshop
by Heather Flanagan 04 Jan '12

04 Jan '12

Who is interested in attributes? - Notes from the ISOC Identity Ecosystem Working Group Open Groups defining standards / schemas / frameworks OIX Attribute Exchange: only having its first meeting this week . IETF: ABFAB. MACE-DIR / eduperson / SHAC. More closed defining standards / schemas / frameworks ITU SG 17 U10: open to liaison with experts on board and open to members. ISO. These are possibly at a higher level than attribute schema. Discussion / implementation groups: Kantara Attribute Discussion Group. REFEDS Attribute Release. Other. SCIM. eID initiatives. Problem areas Sharing across the groups it is difficult to share across where information is closed off by non-release before final / copyright / behind closed doors. The earlier in the process you share work, the easier interoperability is later. Where is convergence? How are we ensuring that the correct feedback is being created when outputs / schemas / proposals are coming out of these groups? Is Kantara the feature for this? Solutions: making John Bradley be the lynch-pin. use existing discussion groups – Kantara is the obvious place. Go out to all the places having discussions – unscaleable. What is the “internet of things” attribute schema? MIBS (++). Attributes of things as well as attributes of people. Devices – as identity consumers as well as having identities themselves. Is device identity more a projection of personal identity? Too much, too many, too patchy. Collision-resistant namespaces - the OpenID Connect approach. Solutions: A simple way to design attribute schema. Attribute registry? Things that don’t assume that there will be one of every type. Agreement around extensibility. IANA? Context provider – in what context can I use this context? Where does the conversation about this happen? Who operates an attribute registry? We need real participants who will benefit from this. Fostering Implementation Developing the business case, putting time and effort in to adoption of what we have now. Discussions to be had around what is the right scope to put around the structure of attributes – filtering, flexibility, assertion. Solutions: ???? Unclear spaces Language code – still not a coherent way to express preferred language. Solutions: write up an RFC on problematic points? OVERALL ACTION: Give these notes to OIX and Kantara

2 1

FW: [trust-el] Call for additional method examples
by Sunday, Robert 03 Jan '12

03 Jan '12

For the interest of the KI Attribute Management Discussion Group ... Regards, Bob Sunday Cyber Authentication Initiative I Initiative d'authentification Cyber Chief Information Officer Branch | Direction du dirigeant principal de l'information Treasury Board of Canada Secretariat | Secrétariat du Conseil du Trésor du Canada Ottawa, Canada K1A 0R5 Office: 613-941-4764 Email: robert.sunday(a)tbs-sct.gc.ca Government of Canada | Gouvernement du Canada ________________________________ From: Sunday, Robert Sent: December 20, 2011 2:30 PM To: 'trust-el(a)lists.oasis-open.org' Subject: RE: [trust-el] Call for additional method examples While not exactly a method example, we feel that it is important to recognize the separation of identity from credentials. To this end I would like to point out the work done on the Pan-Canadian Assurance Model last year. (link below) There is a discussion of the separation of identity and credential and a discussion of compensating factor. The publicly available document is here http://www.iccs-isac.org/en/km/transformative/docs/Pan-Canadian%20Assurance… A corresponding deck can be found here: http://www.iccs-isac.org/en/km/transformative/pdf/assurance.asp Regards, Bob Sunday Cyber Authentication Initiative I Initiative d'authentification Cyber Chief Information Officer Branch | Direction du dirigeant principal de l'information Treasury Board of Canada Secretariat | Secrétariat du Conseil du Trésor du Canada Ottawa, Canada K1A 0R5 Office: 613-941-4764 Email: robert.sunday(a)tbs-sct.gc.ca Government of Canada | Gouvernement du Canada ________________________________ From: trust-el(a)lists.oasis-open.org [mailto:trust-el@lists.oasis-open.org] On Behalf Of Mary Ruddy Sent: December 8, 2011 9:42 AM To: trust-el(a)lists.oasis-open.org Subject: [trust-el] Call for additional method examples Thank you again to those who submitted the first 7 trust elevation method examples that we discussed at the Face-to-face meeting. Attached are the template format for method examples and a sample draft (KBA). Please submit your method examples using the template. (It is ok if they are rough, we have editors to polish them.) Let me know if you have any questions. We don't yet have any examples involving phones, so it would be particularly helpful to get some phone examples. Let me know what questions you have. Best regards, Mary

2 1

REMINDER & AGENDA: DGAM Telecon Tuesday 03 January 2012 11h PT / 14h ET / 19h UTC
by Heather Flanagan 03 Jan '12

03 Jan '12

DIAL-IN: * Skype: +99051000000481 * US Dial-In: +1-805-309-2350 | Room Code: 613-2898 (See http://kantarainitiative.org/wordpress/calendar/ for more international dial-in information) DATE: Tuesday, 03 January 2012 TIME: 11h PT / 14h ET / 19h UTC AGENDA: 1. Administrative a. Roll Call b. New member introduction c. Motion for minutes approval: Minutes 2011-12-20 2011-12-06 2011-11-08 (Do we want to do this as DG? It is not required) d. Agenda confirmation e. Action item review (see below) | 20111108-04 | all | Review the eGov requirements and see what information can be used/discussed at next call | 20111206-02 | Heather | Report on Mapping the Identity Ecosystem workshop, Amsterdam | 20111206-03 | Colin | Report back as liaison with OASIS Trust Elevation | 20111220-01 | Keith| send notes on discussion of the Mapping workshop from the Internet2 MACE-Dir call | 20111220-03 | Sal | update Current Industry Efforts to the OIX attribute working group and the OASIS trust elevation group | 20111220-04 | Keith | add a link to the Internet2/Kuali-Rice/registry group working on a data model to Current Industry Efforts | 20111220-05 | Sal | have an attribute gap session at IIW in January and report back | 20111220-06 | Sal | report back on the "13+3" DOD attributes | 20111220-07 | Heather | have initial discussion group report ready by February 14 call

1 1