- DG-BCTF - mailman.kantarainitiative.org

NOTICE: Proposal to archive BCTF and move works to FIWG
by Joni Brennan 31 Mar '15

31 Mar '15

(cc'd Leadership Council Officers) Dear BCTF, This message is to inform the BCTF of a proposal to consolidate the BCTF work within the Federation Interoperability WG. Working via the Leadership Council, the active FIWG has agreed to accept a contribution of the BCTF works and to continue their development lifecycle. This notice is to advise the BCTF that the Leadership Council (LC) will take actions to move BCTF works to FIWG and to subsequently close the BCTF on the next LC meeting scheduled for April 8th. The BCTF mail list and wiki will then be archived for reference. BCTF participants who wish to continue to contribute to BCTF works are invited to join the FIWG. https://kantarainitiative.org/confluence/x/MYZ7Ag Strong objections to this proposal should be sent to the BCTF list or directly to me should you prefer for privacy. If no objections are communicated, the plan will move forward as proposed. We thank you for your continued contributions to Kantara Initiative toward innovating digital identity solutions and practices! Best Regards, Joni Brennan Kantara Initiative | Executive Director email: joni @ kantarainitiative.org Connecting Identity for a more trustworthy Internet - Overview <http://www.slideshare.net/kantarainitiative/kantara-overview2014-37969351>

1 0

Updated Trust Framework Survey
by Rainer Hoerbe 22 Jun '12

22 Jun '12

As proposed at the last call I updated the list on the Wiki with the data collected for the presentation at the EEMA conference last week. Please not following updates on the Trust Framework Survey page: Added new trust frameworks and more data columns. Now over 110 federations are included, a lot more data was collected, some clean-up done. A breakdown of the data by some categories shows the distribution by country, industry, technology etc. I added a "Top 5 per category" list. The title was renamed from "Implemented Trust Frameworks" to "Global Trust Framework Survey" The slides of my presentation in Paris can be downloaded here. @Patrick: How is the status of proposing a Kantara Report to the LC? Best regards Rainer

1 0

BCTF DG: ad hoc meeting
by Rainer Hoerbe 06 Jun '12

06 Jun '12

Please note the next conference call for the Business Cases for Trust Federations: Location Local time Time zone UTC offset Vienna (Austria - Vienna) Mittwoch, 6. Juni 2012, 21:00:00 CEST UTC+2 hours London (United Kingdom - England) Mittwoch, 6. Juni 2012, 20:00:00 BST UTC+1 hour Auckland (New Zealand) Donnerstag, 7. Juni 2012, 07:00:00 NZST UTC+12 hours Vancouver (Canada - British Columbia) Mittwoch, 6. Juni 2012, 12:00:00 PDT UTC-7 hours Corresponding UTC (GMT) Mittwoch, 6. Juni 2012, 19:00:00 Agenda: 1. Implemented Trust Frameworks Extend the scheme for the "implemented Trust Frameworks" document and discuss further steps to produce an official Kantara Report. 2. AOB Teleconference Info: - Skype: +9900827044630912 - North American Dial-In: +1-201-793-9022 - Room Code: 4630912 Phone Numbers (Toll) Country Number *Long distance costs apply United States +1 (201) 793-9022 Canada +1 (201) 793-9022 Austria +43 (0) 720881948 Belgium +32 (0) 7 0357134 France +33 (0) 826109071 Germany +49 01805009527 Ireland +353 (0) 818270968 Italy +39 691717889 Italy +39 848390177 Spain +34 (9) 02885791 Switzerland +41 (0) 8 48560397 United Kingdom +44 (0) 8454018081

2 1

please select a date for an BCTF ad-hoc call
by Rainer Hoerbe 24 May '12

24 May '12

I would like to convene a meeting for the BCTF discussion group. There is one item on the agenda: Extend the scheme for the "implemented Trust Frameworks" document and discuss further steps to produce an official Kantara Report. Please select a date in this Doodle page: http://www.doodle.com/ryefyp6huwb3dre3 Best regards Rainer Hörbe

4 4

Congratulations to Rainer Hoerbe and Patrick Curry
by Anna Ticktin 04 May '12

04 May '12

Hello All— Join us in congratulating Rainer Hoerbe and Patrick Curry who have been re-elected and elected respectively as the Chairman and Vice-Chairman of the Business Cases for Trusted Federations Discussion Group in Kantara Initiative. Whilst the work effort looks for a more permanent home within Kantara's established working groups, we trust the leadership and guidance of these two to fully progress the BCTF initiative. Congratulations Rainer and Patrick! —> Anna Ticktin anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

BCTF DG Leadership Elections
by Anna Ticktin 19 Apr '12

19 Apr '12

Hello All— What follows is a secret ballot to elect leadership in the Kantara Initiative Business Cases for Trusted Federations (BCTF DG). We received the following nominees and ask that you complete the ballot and submit your vote to staff [at] kantarainitiative [dot] org as directed in item [3] below. Nominee for Chairman: Rainer Hoerbe Nominee for Vice Chairman: Patrick Curry 1. MOTION: To elect the following candidates nominated for the identified officer roles in Kantara BCTF DG. Nominee for Chairman: Rainer Hoerbe Nominee for Vice Chairman: Patrick Curry (Duties of the Chairmen are captured in section 4.4.1 and 4.4.2 of the Operating Procedures.) 2. TERMS: Per section 4.7 of the Operating Procedures, this vote requires a majority vote, or at least 6 affirmative votes, to pass. http://kantarainitiative.org/confluence/download/attachments/2293776/KI+Ope… 3. BALLOT CLOSE DATE: This vote is being issued as a secret ballot, so please reply to staff[at]kantarainitiative[dot]org no later than Friday, 27 April 2012 at 17:00 PT. Additionally, please include in your SUBJECT line "Vote for BCTF DG Leadership. " 4. PROPOSED VOTE: If you are currently a VOTING member, please respond with your vote. If you are not certain of your voting status, the roster of participants is available here: http://kantarainitiative.org/confluence/display/bctf/Participant+Roster I cast my ballot as follows regarding the motion listed above. ________ YES ________ NO * ________ ABSTAIN * IF NO VOTE, Please include the rationale for your “no vote” to help facilitate resolution: ______________________________________________________________________ 5. MEMBER NAME/AFFILIATION: ______________________________________________________________________ —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Leadership Nominations
by Anna Ticktin 23 Mar '12

23 Mar '12

Hello All— Thanks in advance for your time and thoughtful consideration. Pasted below is the call for BCTF Leadership nominations: This note serves as a reminder that nominations are open for leadership positions within the Business Cases for Trusted Federations Discussion Group in Kantara Initiative. http://kantarainitiative.org/confluence/display/bctf/Home Any and all participants and members are eligible for positions. Per section 4.4 of the Operating Procedures, nominations are opening for the following position: 1. Chair/Vice-Chair (duties detailed in section 4.4.1 and 4.4.2 of the Operating Procedures) a. Secretary will serve by appointment of the Chair Please send your nominations to staff (at) kantarainitiative (dot) org. You may nominate yourself or any other member or participant (participant roster is available here: http://kantarainitiative.org/confluence/display/bctf/Participant+Roster Please include in your subject line "Nominations for BCTF DG Leadership." Nominations will be open until 17:00 PST 6 April 2012. At that time, we will compile the nominations, contact the nominees to confirm their interest in serving in a given capacity, and move forward with a ballot election. If you have any questions on this process, the associated duties, etc, please do not hesitate to contact staff (at) kantarainitiative (dot) org. Regards, —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Update on activities and documents
by Rainer Hoerbe 17 Feb '12

17 Feb '12

1. I presented the idea of creating an official Kantara report on the status quo of federation projects to Kantara's LC on Feb. 15. The conclusion was to ask IAWG to host this activity, possibly as a sub-group, to benefit from broader attention. In addition will Patrick and I pursue the idea convincing some people to research the topic in an academic context. 2. I updated the list of implemented federation projects with new data, now approx. 50 projects, and added a column on quantitative structures to gauge each federation size in terms of users, IDPs and SPs. I ask subscribers of this group to contribute data to that table - many of these projects were described by Liberty/Kantara in the past, so I think that our community should know something about it. - Rainer ----------- This mail contains a riddle. If you search carefully you might find a hidden message that asks you for a contribution to the BCTF Wiki ;-)

1 0

REMINDER! BCTF DG telecon currently underway! Pls Join!
by Anna Ticktin 02 Feb '12

02 Feb '12

> DIAL-IN: > > LINE B > * Skype:+99051000000481 > * US Dial-In: +1-805-309-2350 | Conference ID: 613-2898 > > > DATE: > Thursday, 02 / 02 / 2012 > > TIME: > 11h PT / 14h ET / 19h UTC —> Anna Ticktin anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Slides for meeting
by Rainer Hoerbe 02 Feb '12

02 Feb '12

http://kantarainitiative.org/confluence/download/attachments/45057980/what+…

1 0

REMINDER : AdHoc this Thursday!! Pls note the new dial-in
by Anna Ticktin 01 Feb '12

01 Feb '12

DIAL-IN: LINE B * Skype:+99051000000481 * US Dial-In: +1-805-309-2350 | Conference ID: 613-2898 DATE: Thursday, 02 / 02 / 2012 TIME: 11h PT / 14h ET / 19h UTC AGENDA to Come! —> Anna Ticktin anna(a)kantarainitiative.org anna(a)ieee-isto.org

3 3

PRIORITY!! AdHoc BCTF-DG telecon proposed! Pls respond!
by Anna Ticktin 26 Jan '12

26 Jan '12

Hello Folks! Please respond to the doodle poll below with your availability for the proposed telecon tentatively scheduled for next Thursday, 2 February 2012. (NOTE: all times are in Pacific Time). http://doodle.com/rkd4zwthtg3w3u7i Regards. —> Anna Ticktin anna(a)kantarainitiative.org anna(a)ieee-isto.org

3 5

Re: [DG-BCTF] [WG-UMA] UMA & Kantara Cloud Best Practices
by Neil McEvoy 04 Dec '11

04 Dec '11

Thank you Salvatore. Yes I'd like to focus on a use case too, and actually this cuts across a number of WG's and provides a common focus for how Cloud might apply to them. Recently EHealth Ontario joined our 'Canadian Cloud Best Practices Council' (http://canadacloud.biz/cloud-best-practices-council/) with a view to collaborating on developing new innovations. They have their own Federated Identity program called 'ONE ID' - http://www.ehealthontario.on.ca/programs/one_id.asp, which is more theory than it is reality at the moment, and so I'd like to propose Kantara is the ideal way to implement it. They're focused just on the authentication function at the moment, but I think ONE ID is the ideal metaphor for a broader citizen-centric identity architecture, and so how we might additionally incorporate UMA principles would be very productive. I'd also like to explore how this would correlate with a single identifier, like XDI i-names et al. Kind regards, Neil. ----- Original Message ----- From: Salvatore D'Agostino To: 'Neil McEvoy' ; wg-uma(a)kantarainitiative.org Sent: Friday, November 18, 2011 5:58 AM Subject: RE: [WG-UMA] UMA & Kantara Cloud Best Practices Neil, Speaking for myself it would be good to move ahead a use case. Is there a particular vertical, I was thinking that given the needs around health care that we could actually serve eGov and Health IT folks as well. As you will see we UMAnitarians are a cooperative lot, so curious about others ideas. We (UMA) also have a need to progress our trust model so maybe this can help focus on use case as well. Thanks for the interest. Sal From: wg-uma-bounces(a)kantarainitiative.org [mailto:wg-uma-bounces@kantarainitiative.org] On Behalf Of Neil McEvoy Sent: Friday, November 18, 2011 12:45 AM To: wg-uma(a)kantarainitiative.org Subject: [WG-UMA] UMA & Kantara Cloud Best Practices Greetings UMAnitarians I'm new to the list, and by way of introduction I'd like to highlight I'm in process of setting up a new Kantara WG, called Kantara Cloud Identity and Security Best Practices - This will define the intersection between Cloud Computing and Kantara Federated Identity standards. As part of this process I'm seeking to identify complimentary relationships with other WGs. Concerns over data privacy and controls is the #1 concern over Cloud hosting, so it would seem protocols like UMA are fundamental to success of the Cloud, and given the evolution of IT applications, vice versa. I'd love to hear any ideas for collaboration in this area.. Kind regards, --- Neil McEvoy Founder and President Level 5 Consulting http://L5Consulting.net neil.mcevoy(a)l5consulting.net

4 4

ONE-ID as a Service
by Neil McEvoy 02 Dec '11

02 Dec '11

Hi folks I have just joined the Health ID Assurance and Business Case for Federations groups. By way of introduction I am in process of starting a new Kantara WG - Cloud Identity and Security Best Practices, which will focus on the overlap between Kantara programs and Cloud Computing. As part of this I'm looking to define partnering relationships to the other WG's, and here's my initial suggestion for doing so below: I'm working with EHealth Ontario, where they have their own similar program called 'ONE ID' - http://www.ehealthontario.on.ca/programs/one_id.asp So I'd like to propose to them: - How the Kantara Health ID program could be applied in this scenario to implement a Federated Identity system - Via a first step of documenting the business case for doing so The main output from the Kantara Cloud group will be to define how the Kantara standards can be implemented via 'IDaaS' - Identity as a Service, and so this exercise will then further clarify how it could be applied for this industry requirement, so creating 'ONE ID as a Service'. Let me know thoughts and ideas for how best to move this forward, Thanks and regards, --- Neil McEvoy Founder and President Level 5 Consulting http://L5Consulting.net neil.mcevoy(a)l5consulting.net

4 3

AM DG Charter Ready - Seeking Convener
by Joni Brennan 10 Aug '11

10 Aug '11

Hello, The Attribute Management Draft Charter (attached) has received great response and input. The Charter seems ready to move forward. However we are lacking a Convener. We need an individual to volunteer as Convener to get the DG moving. This person could choose to seek group consensus to stay on as a leader or step down during subsequent DG elections. I'm asking for a volunteer(s) to respond to me directly (and please cc' Anna @ kantarainitiative.org) Note: responding to the full list distro will trigger a series of bounces so please just send to Anna and I. Once we have a volunteer the charter can go to LC to move forward. Thanks in advance! =Joni Joni Brennan IEEE-ISTO Kantara Initiative | Executive Director voice:+1 732-226-4223 email: joni @ ieee-isto.org gtalk: jonibrennan skype: upon request Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

1 0

For KI WG/DG Review: Draft Attribute Management DG Charter
by Joni Brennan 04 Aug '11

04 Aug '11

Hello WGs / DGs, The WGs/DGs copied are being contacted because this draft charter identifies each group as 'related' to this discussion. Recently the IAWG has discussed a desire to explore work around Attribute Management. The draft DG charter below was crafted, with IAWG input, to capture that discussion and to define a scope which focuses on: - Identification of KI stakeholder requirements - Discovery of works in progress already (both internal and external to KI) - Performance of gap analysis (between the KI requirements and the works in progress) - Development of recommendation on how Kantara should move forward. Potentially to: - seek to adopt works in progress (external to KI) - seek to engage in collaboration on works in progress (external to KI) - seek to form a KI WG to develop new Attribute Management work(s) We have 2 requests at this time: 1. Send comments back at your earliest convenience. For timing, we'd like to move this forward next week. 2. Confirm if you would 'sign-on' as a proposer (item 6) Thank you in advance for your time, comments and endorsement for this draft. * > DRAFT CHARTER ATTRIBUTE MANAGEMENT DISCUSSION GROUP > * > > *(1) DISCUSSION GROUP NAME* (and any acronym or abbreviation of the name): > The DG name, acronym and abbreviation must not include trademarks not owned > by the Organization, or content that is infringing, harmful, or > inappropriate. > > *Attribute Management Discussion Group (AMDG)* > > *(2) DISCUSSION TOPIC/PURPOSE/MOTIVATION:* Please provide a clear > statement of the topic, purpose, and/or motivation for requesting the > formation of this DG. > The purpose of this Discussion Group is to: > - IDENTIFY: Consensus on a working definition of "Attribute" for purposes > of fulfilling further bullets below. > - IDENTIFY: Kantara Initiative stakeholder requirements regarding Attribute > Management. > - DISCOVER: Attribute Management activities under development both internal > and external to Kantara Initiative. > - GAP ANALYSIS: Attribute Management KI stakeholder requirements compared > to work under development (both internal and external to KI) > - RECOMMEND: scope of work, potential KI adoption of external works, > collaboration with external organizations and/or new WG in KI to perform > design phase of Attribute Management based on requirements, discovery and > gap analysis. > > Areas of consideration include Attribute: > - Assurance > - Schema > - Provisioning > - Binding > - Consent Management (Release, Notice, Privacy) > > Related to the commonality in verticals including: > - Finance, Pharmaceutical, Telecommunications, Jurisdictional, etc > > NOTE: The duration of this group is expected to be generally short in > nature as the group mission is to discover, analyze for gaps and then make a > recommendation. The estimated duration of the DG is approximately 6 months > (or further as decided by the AMDG voting Participants.)* > * > > *(3) LEADERSHIP:* Proposed DG Chair subject to confirmation by a vote of > the DG Participants. > > *NEEDED** > * > > *(4) AUDIENCE:* Anticipated Participants in this DG. > > Actors: > - Identity Providers > - Relying Parties / Data Recipients > > Related KI Groups: > - eGovernment WG > - Identity Assurance WG > - Privacy and Public Policy WG > - Federation Interoperability WG > - Trust Framework Meta-Model WG > - Business Cases for Trusted Federation > - Information Sharing WG > - User Managed Access WG > > Related External Groups: > - ANSI > - NASPO > - OASIS > - Research and Education Federation (REFEDS) > - OIX > - IDABC for Claims > > Related works: > - Simple Cloud Identity Management (SCIM) > - Service Provisioning Mark-up Language (SPML) > - Personal Data Store* > * > > *(5) COPYRIGHT POLICY:* The Organization approved Intellectual Property > Rights Policy to cover any copyright material that may be produced as a > result of DG 'Participants' posts to the wiki or email archives. > > <http://kantarainitiative.org/confluence/download/attachments/2293776/Kantar…> > > Kantara Initiative IPR Policy<http://kantarainitiative.org/confluence/download/attachments/2293776/Kantar…>- Creative Commons Share-Alike Attribution > * > * > > *(6) PROPOSERS:* Names, email addresses, and any constituent affiliations > of at least the minimum set of proposers required to support forming the DG. > At least 3 Participants are required to request formation of a DG. > > 1. Helen Hill, HIMSS > 2. <insert> > 3. <insert> > > > >

2 3

BCTF-DG Meeting Notes 11 July 2011
by Anna Ticktin 11 Jul '11

11 Jul '11

Hello All— For a quick review of today's meeting notes, please click this link : http://kantarainitiative.org/confluence/display/bctf/BCTF-DG+Meeting+Notes+…. —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Dial In Reminder: BCTF-DG Telecon Monday 11 July - 10:00PST / 13:00 EST / 19:00 CEST
by Anna Ticktin 10 Jul '11

10 Jul '11

DIAL-IN: LINE B Skype: +9900827044630912 US Dial-In: +1-201-793-9022 | Room Code: 4630912 DATE: Monday, 11 July 2011 TIME: 10:00PST / 13:00 EST / 19:00 CEST AGENDA: 1. ADMINISTRATIVE: Roll Call Agenda confirmation Action item review 2. F/U on last meetings point "Planning for the DG activities". Please contribute your needs and requirements to enable us to plan. 3. AOB Adjourned —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

2 1

FW: EU Science Community Trust Federation (A single computing identity)
by Colin Wallis 27 Jun '11

27 Jun '11

FYI, courtesy of ITU-T lists.. Note that Kantara member Terena is mentioned here, so with that, and direct to the presenter, we could outreach with KI's uber- TF work and suggest they stop needlessly re-inventing too many wheels. Cheers Colin From: Martin.Euchner(a)itu.int [mailto:Martin.Euchner@itu.int] Sent: Monday, 27 June 2011 8:49 p.m. To: t09sg17q10(a)lists.itu.int; Martin.Euchner(a)itu.int Subject: [T17Q10] A single computing identity FYI: The article references a recent workshop on Federated identity system for scientific collaborations<http://indico.cern.ch/conferenceDisplay.py?confId=129364> at CERN. See: http://indico.cern.ch/contributionListDisplay.py?confId=129364 Presentation slides of particular interest are: IGTF: The International Grid Trust Federation - enabling an interoperable global trust fabric http://indico.cern.ch/materialDisplay.py?contribId=12&sessionId=3&materialI… --- http://www.isgtw.org/feature/single-computing-identity A single computing identity How do you make a federated identity system as secure as the passport system is for air travel? Feature | June 22, 2011 | By Adrian Giordani When a scientist or engineer decides to use a computer grid for the first time, they have to create, identify and become verified. It's a drawn out process of verification, but eventually they get access to powerful computing facilities for their project. The problem arises when the same person wants to access other infrastructures, for example a high-performance computer, they have to go through the same process again, and again, and again. Now, users and providers of e-infrastructure are trying to create a federated identity - that is, easy access to data and services through a single login and standardized security protocols. Then, a user's login would act much like a passport: the user's host organization, such as a university or research institute, provides an identity that allows the user to access the resources from any other infrastructure, much like a passport allows a citizen to travel between countries with an identifying document from their country of citizenship. A federated identity system<https://indico.cern.ch/event/129364> conference was held at CERN on 9th and 10th June, and it was the first step towards addressing issues of identity management. In attendance were software developers and system administrators from five scientific communities including the WLCG<http://lcg.web.cern.ch/lcg/>, European photon/neutron and Earth science communities and discussed how they enabled federation. This need for a federated identity is partially driven by the influx of youthful, 'Generation Y<http://www.guardian.co.uk/money/2008/may/25/workandcareers.worklifebalance>' researchers to academic institutions. "They are the Facebook generation," said Bob Jones, openlab<https://proj-openlab-datagrid-public.web.cern.ch/proj-openlab-datagrid-publ…> director at CERN<http://user.web.cern.ch/user/Welcome.asp>. "They have little tolerance for barriers and relics of the past. They want to share data with whom they want, when they want." It's also driven by the need for better collaboration between institutions. "The scientific community ... faces some significant challenges [such as] the sheer volume of data produced. This is driving a need for distributed solutions where data is hosted across multiple organizations," said Philip Kershaw, a software developer and expert in federated identity management for the British Atmospheric Data Centre (BADC<http://badc.nerc.ac.uk/home/>), and who presented at the conference about the requirements of users in Earth sciences. One of the crucial steps in creating federated identity is to develop a system for federated access which is secure. "Concepts of trust have had to be re-evaluated to address new challenges. There has been a need to go beyond traditional models of security expressed within the bounds of a single organization and enable access to data seamlessly across multiple organizations," said Kershaw. Kershaw worked with US - particularly those at Argonne National Laboratory<http://www.anl.gov/> - and European colleagues to develop the security architecture for the Earth System Grid Federation (ESGF), which integrates high performance computers with large-scale data and analysis servers and is expected to soon have 10,000 users spanning the globe. "Federated security is a large domain and problem space ... There are some big challenges to tackle in terms of how credentials and attributes are translated between domains and how trust is managed," said Kershaw. Does one size fit all? Users of ESGF access global climate model experiments, from Coupled Model Intercomparison Project, Phase 5 (CMIP5<http://cmip-pcmdi.llnl.gov/cmip5/>), of which the data archive is expected to be 2.4 petabytes. Due to this huge size and limitations in bandwidth for users around the world, a distributed solution was required for easier data access. It is typical of research in climate science to require access to multiple data sets from a variety of sources, including web browsers, command line tools such as GridFTP<http://www.globus.org/toolkit/data/gridftp/>, and rich-client tools such as CDAT<http://badc.nerc.ac.uk/help/software/cdat/>. Many of these tools work with HTTP<http://en.wikipedia.org/wiki/HTTP>, an established Internet protocol. "Given a distributed model you then need a federated security solution. For user authentication, this meant the use of technologies like OpenID," Kershaw said. OpenID<http://openid.net/> is a decentralized open standard that provides users with a single unique URL to access any of their online accounts. "It was selected because it was perceived as a simple protocol with good support in terms of software implementations," said Kershaw. However, OpenID is not without its security flaws. "We profiled its use stipulating HTTPS<http://en.wikipedia.org/wiki/HTTP%20Secure> for all interactions to make it more secure and also to enable us to white list Identity Providers (IdP)." Identity providers represent a user's academic institution. "So the system only accepts users from a given set of institutions trusted within the federation," Kershaw said. However, even this single-sign-on concept, although straightforward, can present challenges. One example is when a user creates multiple OpenID accounts unnecessarily. Kershaw said, "Users unfamiliar with the single-sign on concept can get confused in a federated system. It needs careful design of user interfaces and the right help and support to introduce users to concepts." There has been a need to go beyond traditional models of security expressed within the bounds of a single organization and enable access to data seamlessly across multiple organizations," said Philip Kershaw. Another problem is that OpenID is only suited to browser-based clients, so Kershaw and the ESGF development team had to develop an alternative solution for users who use other software clients. Their solution was: "By securing applications like OPeNDAP<http://www.opendap.org/> with SSL<http://en.wikipedia.org/wiki/Transport%20Layer%20Security> it became possible to exploit a Grid-like model for authentication. Users obtain short lived credentials from a MyProxy<http://grid.ncsa.illinois.edu/myproxy/> server hosted at their IdP. With this, they can configure non-browser based clients to authenticate over SSL with the OPeNDAP service," he said. Hydrology and oceanography scientific communities are also showing an interest in ESGF's federated approach. However, there are 'federated identity' alternatives to OpenID. In the US, for example, more than 4,500 users have been given single-sign on to access to TeraGrid<http://www.teragrid.org/>'s high-performance computing resources. They use Shibboleth<http://shibboleth.internet2.edu/>, which is an implementation of SAML<http://saml.xml.org/>, the security standard widely adopted by US-based campuses. For Jim Basney, a senior scientist working on TeraGrid, Shibboleth is a high quality service and has active community support. He said, "We have diverse requirements, and it is unlikely that a single standard will ever satisfy all cases. Ideally we will adopt approaches that are open, interoperable, and scalable, not just from a strictly technical perspective but also in terms of policy and community support." With kind regards Martin Euchner. Advisor of Study Group 17 Telecommunication Standardization Bureau (TSB) International Telecommunication Union (ITU) e-mail : Martin.Euchner(a)itu.int Phone : +41 22 730 5866 Mobile: +41 79 592 4688 URL : http://www.itu.int/ITU-T/studygroups/com17 Office No : M.415 [cid:image001.png@01CC35AB.3548E070] Place des Nations CH-1211 Geneva 20 Switzerland ==== CAUTION: This email message and any attachments contain information that may be confidential and may be LEGALLY PRIVILEGED. If you are not the intended recipient, any use, disclosure or copying of this message or attachments is strictly prohibited. If you have received this email message in error please notify us immediately and erase all copies of the message and attachments. Thank you. ====

1 0

Agenda for BCTF ad hoc Tconf Monday 2011-06-27
by Rainer Hörbe 26 Jun '11

26 Jun '11

The ad-hoc meeting to replace this month regular meeting (that was on a holiday) is on Monday, 27 June 2011 19:00 CEDT; see the calendar for all the details: Date and Time WG telecon on Monday, 27 June 2011, at 10:00am PT (time chart) DIAL-IN: - Skype: +9900827044630912 - North American Dial-In: +1-201-793-9022 - Room Code: 4630912 Agenda Progress since Berlin: Draft of Cooperation Models for Trust Federations Draft of Business Models Planning: Wishes, requirements, resource AOB Rainer Hörbe ________________________ DG-BCTF mailing list dg-bctf(a)kantarainitiative.org

1 0

REMINDER: BCTF-DG AdHoc Telecon Monday 27 June 2011 10h PST / 13h EST / 19h CEST
by Anna Ticktin 23 Jun '11

23 Jun '11

> Hello All— > > This serves as a reminder that the BCRF-DG will be holding it's adhoc telecon next Monday. Please mark your calendars as a reminder for participation. > Rainer will follow with a complete agenda in advance of the call. > > > DATE: > Monday 27 June 2011 > > TIME: > 10h PST / 13h EST / 19h CEST > > > DIAL-IN: > - Skype: +9900827044630912 > - North American Dial-In: +1-201-793-9022 > - Room Code: 4630912 > > > —> Anna Ticktin > > Technical Program Coordinator > anna(a)kantarainitiative.org > anna(a)ieee-isto.org >

1 0

Re: [DG-BCTF] BCTF Tconf Whit Monday 19:00
by Rainer Hörbe 13 Jun '11

13 Jun '11

Let us dial in and see who will join. If it just the three of us I think would should postpone the meeting. Am 13.06.2011 um 18:19 schrieb Louie, Sarah I CITZ:EX: > Hi Rainer. Is this still happening today? > > > Sarah Louie, BSc (Computer Science), SCF (SABSA), CISSP > Application Security Architect > Information Security Branch, OCIO > Ministry of Labour, Citizens' Services and Open Government > Land: 250-952-6965 > BlackBerry: 250-415-2644 > www.cio.gov.bc.ca > > -----Original Message----- > From: Louie, Sarah I CITZ:EX > Sent: Friday, June 10, 2011 11:18 AM > To: 'Rainer Hörbe' > Subject: RE: [DG-BCTF] BCTF Tconf Whit Monday 19:00 > > Thank you. I am available. > > > Sarah Louie, BSc (Computer Science), SCF (SABSA), CISSP > Application Security Architect > Information Security Branch, OCIO > Ministry of Labour, Citizens' Services and Open Government > Land: 250-952-6965 > BlackBerry: 250-415-2644 > www.cio.gov.bc.ca > > > -----Original Message----- > From: Rainer Hörbe [mailto:rainer@hoerbe.at] > Sent: Friday, June 10, 2011 10:34 AM > To: Louie, Sarah I CITZ:EX > Cc: dg-bctf(a)kantarainitiative.org > Subject: Re: [DG-BCTF] BCTF Tconf Whit Monday 19:00 > > 10:00 Pacific > 19:00 Central European > >

2 2

Re: [DG-BCTF] BCTF Tconf Whit Monday 19:00
by Rainer Hörbe 10 Jun '11

10 Jun '11

10:00 Pacific 19:00 Central European Am 10.06.2011 um 19:15 schrieb Louie, Sarah I CITZ:EX: > Hi Rainer. 19:00 what country and time zone? > > > Sarah Louie, BSc (Computer Science), SCF (SABSA), CISSP > Application Security Architect > Information Security Branch, OCIO > Ministry of Labour, Citizens' Services and Open Government > Land: 250-952-6965 > BlackBerry: 250-415-2644 > www.cio.gov.bc.ca > > -----Original Message----- > From: dg-bctf-bounces(a)kantarainitiative.org [mailto:dg-bctf-bounces@kantarainitiative.org] On Behalf Of Rainer Hörbe > Sent: Friday, June 10, 2011 10:09 AM > To: dg-bctf(a)kantarainitiative.org > Subject: [DG-BCTF] BCTF Tconf Whit Monday 19:00 > > I would like to ask who will be available on Monday. > > Agenda items: > - Review of Berlin minutes > - Progress since Berlin (little) > - Planning: Wishes, requirements, resources > > Have a nice WE > Rainer > _______________________________________________ > DG-BCTF mailing list > DG-BCTF(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/dg-bctf

1 0

BCTF Tconf Whit Monday 19:00
by Rainer Hörbe 10 Jun '11

10 Jun '11

I would like to ask who will be available on Monday. Agenda items: - Review of Berlin minutes - Progress since Berlin (little) - Planning: Wishes, requirements, resources Have a nice WE Rainer

1 0

BERLIN F2F dial-in schedule—PLS READ!!!
by Anna Ticktin 06 May '11

06 May '11

Hello there— As we approach the Kantara F2F in Berlin, I want to highlight some wg calls will be shifted that week to allow for dial-in participation from members otherwise unable to attend in person. Given the interdependent agendas and efforts of many of our Assurance & Certification wgs, I'm pasting relevant sessions that may be of interest to members in addition to their regular telecon commitments. In accordance with past practices, this schedule presumes the regular weekly calls will be supplanted by the Berlin agenda unless otherwise agreed to by your WG. Please note these adjusted call times for the week of 16 May 2011 and adjust your schedules accordingly. (Dial-ins will follow. ) (All times are given in Central European Time and calculated for EST & PST. To ensure accuracy or check conversions for your particular times zone, please reference the world clock link.) Monday 16 May: • Business Cases for Trusted Federation DG 13h-15h CET / 7:00-9:00 EST • Assurance & Certification Sync Session 1 15:15h-17h CET / 9:15-11:00 EST / 6:15-8:00 PST • eGOV 15:15h-17h CET / 9:15-11:00 EST / 6:15-8:00 PST Tuesday 17 May: • P3WG 13h-15h CET / 7:00-9:00 EST • IAWG 15:15h-17h CET / 9:15-11:00 EST / 6:15-8:00 PST • eGOV 15:15h-17h CET / 9:15-11:00 EST / 6:15-8:00 PST Wednesday 18 May: • Assurance & Certification Sync Session 2 1513h-15h CET / 7:00-9:00 EST Again, dial-ins will follow. Regards. —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

F2F meeting of BCTF DG in Berlin
by Rainer Hörbe 03 May '11

03 May '11

Dear all, We will have two sessions on business cases in Berlin: Monday, May 16 13:00-15:00 CET and Agenda: Review of the Implemented Trust Frameworks; Discussion how satisfactory the result is, how to improve and go further. Wednesday, May18 10:30-12:00 CET. Agenda: Business case analysis. Which patterns can we see in the implemented trust frameworks? What are the business models? How do actors benefit? Please let me an Dervla know who wants to join the meetings on the conference call. Best regards Rainer > From: Dervla O'Reilly <dervlaoreilly(a)me.com> > Date: April 27, 2011 8:05:06 PM PDT > To: Hörbe Rainer <rainer(a)hoerbe.at> > Subject: Phone line for BCTF DG in Berlin > > Rainer, > > Can you confirm if you need a phone for your FI WG meeting in Berlin? http://kantarainitiative.org/confluence/display/GI/Kantara+Initiative+Confe… > > Thanks > Dervla >

1 0

Fwd: [Kantara - Community] Early bird registration ends April 15, 2011 for Kantara Initiative Meeting, May 16-18, 2011 hosted by Fraunhofer FOKUS Charlottenburg Berlin
by Dervla O'Reilly 06 Apr '11

06 Apr '11

Hi, I'm encouraging all those planning to attend to register before the early-bird deadline April 15. Cheers, Dervla Begin forwarded message: > From: Dervla O'Reilly <dervlaoreilly(a)me.com> > Date: April 6, 2011 7:43:14 AM PDT > To: community(a)kantarainitiative.org > Cc: Kantara Leadership Council Kantara <LC(a)kantarainitiative.org>, > "Kantara Trustees (E-mail)" <trustees(a)kantarainitiative.org>, "staff(a)kantarainitiative.org > list" <staff(a)kantarainitiative.org> > Subject: [Kantara - Community] Early bird registration ends April > 15, 2011 for Kantara Initiative Meeting, May 16-18, 2011 hosted by > Fraunhofer FOKUS Charlottenburg Berlin > > We invite you to join us for the Kantara Initiative meeting May > 16-18, 2011 at Fraunhofer FOKUS' Institute in Charlottenburg, Berlin. > > Our 3-day event where Kantara’s Board of Trustees (BoT), Leadership > Council (LC), Discussion Groups (DGs) and Working Groups (WGs) will > convene. > > The early bird registration deadline ends April 15, 2011. We have a > new pricing structure where you can sign up for 1 day or the full > event. See the current agenda and specific event logistics in > detail at our events wiki space. > > We look forward to seeing you in Germany. > > Let me know if questions. > > Regards, Dervla > > ________________________ > Dervla O’Reilly > Program Manager > Kantara Initiative > +1 415 731 4487 business > +1 415 948 3650 mobile > +1 509 757 4487 fax > dervla[at]kantarainitiative[dot]org > http://www.kantarainitiative.org > _______________________________________________ > Community mailing list > Community(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/community

1 0

Reminder—BCTF DG telecon today 10 PDT / 13h EDT / 17h UTC
by Anna Ticktin 21 Mar '11

21 Mar '11

DATE: Monday 21 March 2011 TIME: 10 PDT / 13h EDT / 17h UTC DIAL IN - Skype: +9900827044630912 - North American Dial-In: +1-201-793-9022 - Room Code: 4630912 —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Reminder—BCTF DG telecon today 10 PDT / 13h EDT / 17h UTC
by Anna Ticktin 21 Mar '11

21 Mar '11

DATE: Monday 21 March 2011 TIME: 10 PDT / 13h EDT / 17h UTC DIAL IN - Skype: +9900827044630912 - North American Dial-In: +1-201-793-9022 - Room Code: 4630912 —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

PKI vs Non-PKI based trust models
by Rainer Hörbe 18 Mar '11

18 Mar '11

John, Patrick and I had a discussion about the pros and cons of federation models based on credentials versus assertions. The attached document is a preliminary result with conclusions like PKI and non-PKI federation models need to be combined in most cases at higher LoA To implement a federation an RFC 3647-style policy is insufficient; A more complete Trust Framework is needed Whereas the Higher Education sector favors brokered trust, e-Government and Industry prefer the PKI approach. But it is not a question of one way or the other. Request for feedback: I wonder where this discussion should be homed. FIWG, BCTF and TFMM are related, and it is also an extrakantarian issue. Any interest to take over this discussion? - Rainer

9 10

Identity Federation project questionaire & help needed
by Mikaël Ates 17 Mar '11

17 Mar '11

Hello, Some other projects: RoleID http://www.roleid.org/ role-ID is developing an organization-oriented identity extension based on a role-centric vision. (In other words, a dynamic cross-organization access control system relying on identity federation) FederID http://federid.ow2.org A project funded by the French Research Agency to make a bundle of free software for digital identity Managements, including SAML IdPs. TAS3 www.tas3.eu You can contact me for RoleID and FederID. I guess Sampo Kellomäki may be contacted for TAS3. Cheers, Mikaël Ates, PhD, Research Eng. Identity and Security Entr'ouvert 169 rue du Château 75014 Paris, France +33 6 63 36 44 45 jabber: mates(a)im.libre-entreprise.com

1 0

Re: [DG-BCTF] [Kantara - Community] [KI-LC] Identity Federation project questionaire & help needed
by llevan＠probaris.com 16 Mar '11

16 Mar '11

GFIPM [Global Federated Identity and Privilege Management] http://www.it.ojp.gov/gfipm Best, LaChelle LeVan, CSCIP On Wed, March 16, 2011 5:37 pm, Colin Wallis wrote: > Great effort. > Thanks Rainer > > > One more to add.. > > > http://www.fixs.org/ > > > Cheers > Colin > > > From: lc-bounces(a)kantarainitiative.org > [mailto:lc-bounces@kantarainitiative.org] On Behalf Of Rainer Hörbe > Sent: Wednesday, 16 March 2011 2:08 a.m. > To: Kantara Council Kantara Leadership; community(a)kantarainitiative.org > Cc: dg-bctf(a)kantarainitiative.org; dg-eum-request(a)kantarainitiative.org > Subject: [KI-LC] Identity Federation project questionaire & help needed > > > To facilitate the proliferation of Identity Federations the BCTF > (Business Cases for Trust Federation Discussion Group) is collecting, > documenting and classifying projects of this category. This is not about > technology, standards or areas of interest (SAML, OpenID, WS-Trust, etc.) > but about business (FICAM, InCommon, SAFE, TSCP, STORK, etc.). So far > have named 25 projects and described 3 projects in detail: > > http://kantarainitiative.org/confluence/display/bctf/Implemented+Trust+Fr > ameworks > > We need to know about more projects and more about projects. I am asking > you to contribute to this community effort in one or the other way: > > * Provide a reference to similar lists that describe federation > projects * Name projects that you know and are not in the list (except > higher edu - counts as a single project for now) * Make contact to > people who you think know more about this * Submit more information on > projects that need an overview and/or detailed description * Be an > editor for one or more items in the list > > If editing the wiki is an obstacle, please submit you contribution vie > email to > dg-bctf(a)kantarainitiative.org<mailto:dg-bctf@kantarainitiative.org>. > > > Your help is very appreciated. > - Rainer Hörbe > - Kantara BCTF DG - chair > > > > ==== > CAUTION: This email message and any attachments contain information that > may be confidential and may be LEGALLY PRIVILEGED. If you are not the > intended recipient, any use, disclosure or copying of this message or > attachments is strictly prohibited. If you have received this email > message in error please notify us immediately and erase all copies of the > message and attachments. Thank you. ==== > _______________________________________________ > Community mailing list > Community(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/community > >

1 0

Identity Federation project questionaire & help needed
by Rainer Hörbe 16 Mar '11

16 Mar '11

To facilitate the proliferation of Identity Federations the BCTF (Business Cases for Trust Federation Discussion Group) is collecting, documenting and classifying projects of this category. This is not about technology, standards or areas of interest (SAML, OpenID, WS-Trust, etc.) but about business (FICAM, InCommon, SAFE, TSCP, STORK, etc.). So far have named 25 projects and described 3 projects in detail: http://kantarainitiative.org/confluence/display/bctf/Implemented+Trust+Fram… We need to know about more projects and more about projects. I am asking you to contribute to this community effort in one or the other way: Provide a reference to similar lists that describe federation projects Name projects that you know and are not in the list (except higher edu - counts as a single project for now) Make contact to people who you think know more about this Submit more information on projects that need an overview and/or detailed description Be an editor for one or more items in the list If editing the wiki is an obstacle, please submit you contribution vie email to dg-bctf(a)kantarainitiative.org. Your help is very appreciated. - Rainer Hörbe - Kantara BCTF DG - chair

2 1

Re: [DG-BCTF] [WG-FI] PKI vs Non-PKI based trust models
by Bucci, Debbie (NIH/CIT) [E] 14 Mar '11

14 Mar '11

There is room for both front and back end attribute release mechanisms. I do not think the BAE is exclusively PIV only. ________________________________ From: wg-fi-bounces(a)kantarainitiative.org <wg-fi-bounces(a)kantarainitiative.org> To: Patrick Harding <pharding(a)pingidentity.com> Cc: dg-bctf(a)kantarainitiative.org <dg-bctf(a)kantarainitiative.org>; FI WG <WG-FI(a)kantarainitiative.org>; Curry Patrick <patrick.curry(a)federatedbusiness.org>; Kantara Leadership Council Kantara <LC(a)kantarainitiative.org> Sent: Mon Mar 14 13:27:45 2011 Subject: Re: [WG-FI] PKI vs Non-PKI based trust models Yes that is a popular solution inside Enterprises and some Gov. The problem is scalability and user consent. In the US PIV BAE case the permission to make a SAML query on the identifier (FASC-N) in the certificate is on a agency by agency basis. There is no way for the owner agency to know if the requester needs the info of if the user is asking for access. Given the high level of trust between agencies, they tend not make info available. The problem is as the distance between the parties gets larger, releasing information without some sort of user confirmation becomes more problematic. In those cases we have discussed using SAML Holder of Key between organizations to be able to provide more control over attribute release while maintaining the security of the session binding to the card keys. There are multiple approaches. John B. On 2011-03-14, at 11:47 AM, Patrick Harding wrote: +1 We have a number of customers who use PKI (for AuthN) in combination with SAML (for AuthZ). SAML is used to move user attributes from the IdP to the SP to allow the SP to make authorization decisions. These attributes are stored in a Directory at the IdP rather than being 'baked into' the users certificate. The main reason seems to be an expectation that these attributes will change much more often than the users certificate will be renewed. (And yes in this context SAML Assertions do start to sound an awful lot like 'attribute certiicates'). On Mon, Mar 14, 2011 at 10:50 AM, John Bradley <ve7jtb(a)ve7jtb.com<mailto:ve7jtb@ve7jtb.com>> wrote: It is a complicated almost religious discussion. I don't think assertions (SAML, openID) or PKI client Auth are going away any time soon. The trust model and technology are slightly disjoint discussions. People can use smartcards with self issued certificates and SAML providers can sign assertions with certificates with roots ross certified to specific PKI bridges. This is probably more a FIWG discussion. That is where the rubber hits the road for the more complicated cross federation issues, when it comes to trust models. For certificates vs assertions there is a privacy related issue. Depending on the use case. For Defence intelligence and Police credentials there may be no expectation of privacy or anonymity or privacy when your credential is used. However many privacy people in the Citizen to Gov use case want to stop correlating identifiers across sites. In some case there is a legal requirement for this. I helped start Xcert software (now RSA KeyOn) 12 years ago to work on federated identity issues using PKI client Auth. Why PKI failed in the consumer/internet space is a big topic. In the US FICAM anticipates the vast majority of external credentials it will accept to be assertion based. I should also mention that u-prove (zero knowledge prrof) cryptography contains elements of both certificates and assertions. I have limited expectations for any short term traction on that however. The reality is that the main driving force on the internet is access to API, and attributes. SSO is just something that is going along for the ride. The US Gov PIV card deployment needs BAE (SAML attribute query) to retrieve attributes and be useful. (perhaps overstated) Lets discuss how you want to separate the issues. If we tackle them all together we will probably get nowhere. John B. On 2011-03-14, at 8:08 AM, Rainer Hörbe wrote: John, Patrick and I had a discussion about the pros and cons of federation models based on credentials versus assertions. The attached document is a preliminary result with conclusions like * PKI and non-PKI federation models need to be combined in most cases at higher LoA * To implement a federation an RFC 3647-style policy is insufficient; A more complete Trust Framework is needed * Whereas the Higher Education sector favors brokered trust, e-Government and Industry prefer the PKI approach. But it is not a question of one way or the other. Request for feedback: I wonder where this discussion should be homed. FIWG, BCTF and TFMM are related, and it is also an extrakantarian issue. Any interest to take over this discussion? - Rainer <pki vs non-pki.pdf> _______________________________________________ WG-FI mailing list WG-FI(a)kantarainitiative.org<mailto:WG-FI@kantarainitiative.org> http://kantarainitiative.org/mailman/listinfo/wg-fi -- Patrick Harding | CTO PingIdentity | www.pingidentity.com<http://www.pingidentity.com/> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - O: +1 781.373.4859 M: +1 617.304.0659 Email: pharding(a)pingidentity.com<mailto:pharding@pingidentity.com><mailto:adurand@pingidentity.com> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Connect with Ping Twitter: @pingnewsflash LinkedIn Group: Ping's Identity Cloud Facebook.com/pingidentitypage<http://Facebook.com/pingidentitypage> Connect with me Twitter: @pingcto LinkedIn.com/in/patrickharding<http://LinkedIn.com/in/patrickharding>

3 2

Congratulations to the newly elected BCTF DG leadership!
by Anna Ticktin 14 Mar '11

14 Mar '11

Hello All— Join me in congratulating Rainer as we acknowledge his nomination and now confirmed election to the post of BCTF-DG Chairman! We're all confident the group will do well under his leadership. Congratulations Rainer! Regard. —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Cloud Security Alliance (CSA) participant? Please respond.
by Anna Ticktin 10 Mar '11

10 Mar '11

Hello All— I'm trying to understand who in our Kantara WGs also participates in the Cloud Security Alliance (CSA). Please reply with your status. Regards. —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Fwd: FINAL REMINDER: BCTF DG Leadership Ballot—PLEASE RESPOND
by Anna Ticktin 08 Mar '11

08 Mar '11

> Hello All— > > This notice serves as a final reminder for a response by BCTFDG voting members to the ballot below. > This action will close on Friday, 11 March 2011 at 17h PT. > > Regards. > —> Anna Ticktin > > Technical Program Coordinator > anna(a)kantarainitiative.org > anna(a)ieee-isto.org > > On 1Mar2011, at 8:43 PM, Anna Ticktin wrote: > >> >> >> >> Hello All— >> >> What follows is a secret ballot to elect leadership in the Kantara Initiative Business Cases for Trusted Federation (BCTF DG). >> We received the following nominee and ask that you complete the ballot and submit your vote to staff [at] kantarainitiative [dot] org as directed in item [3] below. >> >> >> Nominee for Chairman: Rainer Hoerbe >> >> >> >> 1. MOTION: >> To elect the following candidate nominated for the identified officer role in the Kantara BCTF DG. >> >> Chairman: Rainer Hoerbe >> >> >> >> 2. TERMS: >> Per section 4.4 of the Operating Procedures, this vote requires a majority vote, or at least 4 affirmative votes, to pass. >> [1] http://kantarainitiative.org/confluence/download/attachments/2293776/KI+Ope… >> >> >> 3. BALLOT CLOSE DATE: >> This vote is being issued as a secret ballot, so please reply to staff[at]kantarainitiative[dot]org no later than Friday, 11 March 2011 at 17:00 PST. >> Additionally, please include in your SUBJECT line "Vote for BCTF DG Leadership. " >> >> >> >> 4. PROPOSED VOTE: >> If you are currently a VOTING member, please respond with your vote. If you are not certain of your voting status, the roster of participants is available here: >> >> >> I cast my ballot as follows regarding the motion listed above. >> >> >> ________ YES >> >> >> ________ NO * >> >> >> ________ ABSTAIN >> >> >> >> * IF NO VOTE, Please include the rationale for your “no vote” to help facilitate resolution: >> >> ______________________________________________________________________ >> >> >> >> >> 5. MEMBER NAME/AFFILIATION: >> >> >> ______________________________________________________________________ >> >> >> >> —> Anna Ticktin >> >> Technical Program Coordinator >> anna(a)kantarainitiative.org >> anna(a)ieee-isto.org >> >> >> >

1 0

BCTF DG Leadership Ballot—PLEASE RESPOND
by Anna Ticktin 04 Mar '11

04 Mar '11

Hello All— What follows is a secret ballot to elect leadership in the Kantara Initiative Business Cases for Trusted Federation (BCTF DG). We received the following nominee and ask that you complete the ballot and submit your vote to staff [at] kantarainitiative [dot] org as directed in item [3] below. Nominee for Chairman: Rainer Hoerbe 1. MOTION: To elect the following candidate nominated for the identified officer role in the Kantara BCTF DG. Chairman: Rainer Hoerbe 2. TERMS: Per section 4.4 of the Operating Procedures, this vote requires a majority vote, or at least 4 affirmative votes, to pass. [1] http://kantarainitiative.org/confluence/download/attachments/2293776/KI+Ope… 3. BALLOT CLOSE DATE: This vote is being issued as a secret ballot, so please reply to staff[at]kantarainitiative[dot]org no later than Friday, 11 March 2011 at 17:00 PST. Additionally, please include in your SUBJECT line "Vote for BCTF DG Leadership. " 4. PROPOSED VOTE: If you are currently a VOTING member, please respond with your vote. If you are not certain of your voting status, the roster of participants is available here: I cast my ballot as follows regarding the motion listed above. ________ YES ________ NO * ________ ABSTAIN * IF NO VOTE, Please include the rationale for your “no vote” to help facilitate resolution: ______________________________________________________________________ 5. MEMBER NAME/AFFILIATION: ______________________________________________________________________ —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 1

Fwd: Registration open for Kantara Initiative Meeting May 16-18, 2011 hosted by Fraunhofer FOKUS, Charlottenburg, Berlin
by Dervla O'Reilly 01 Mar '11

01 Mar '11

FYI for those who may not have seen this communication to our community list today. We hope to see you in Berlin in May. Dervla Begin forwarded message: > From: Dervla O'Reilly <dervla(a)kantarainitiative.org> > Date: March 1, 2011 9:09:52 AM PST > To: community(a)kantarainitiative.org > Cc: Kantara Leadership Council Kantara <LC(a)kantarainitiative.org>, > "Kantara Trustees (E-mail)" <trustees(a)kantarainitiative.org>, "staff(a)kantarainitiative.org > list" <staff(a)kantarainitiative.org> > Subject: Registration open for Kantara Initiative Meeting May 16-18, > 2011 hosted by Fraunhofer FOKUS, Charlottenburg, Berlin > > Registration is now open for the Kantara Initiative meeting May > 16-18, 2011. Much thanks to Fraunhofer FOKUS who will host us at > their Institute in Charlottenburg, Berlin. > > We invite you to join us at our 3-day event where Kantara’s Board of > Trustees (BoT), Leadership Council (LC), Discussion Groups (DGs) and > Working Groups (WGs) will convene. > > Take advantage of the early bird registration which is available > until April 15, 2011. We have a new pricing structure where you can > sign up for 1 day or the full event. See the current agenda and > specific event logistics in detail at our events wiki space. > > We look forward to seeing you in Germany. > > Dervla > > ________________________ > Dervla O’Reilly > Program Manager > Kantara Initiative > +1 415 731 4487 business > +1 415 948 3650 mobile > +1 509 757 4487 fax > dervla[at]kantarainitiative[dot]org > http://www.kantarainitiative.org > > Subscribe to the Kantara Initiative newsletter >

1 0

BCTF-DG Meeting Minutes.
by Anna Ticktin 28 Feb '11

28 Feb '11

Hello All— We were a small group today, but had a very informative call. For a capture of today's meeting minutes , please click on the link or find them posted on the BCTF wiki space. Additionally, look out for 2 important threads on the mail list: [1] an electronic ballot for dg leadership [2] a doodle poll for an ad hoc telecom next week. Peter Wadkins from BC Gov will be presenting his storyboard concept on TFWs. Regards. —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Fwd: Reminder: BCTF DG Telecon Mon 28 Feb 2011 10:00 PT / 13:00 ET / 18:00 UTC
by Anna Ticktin 28 Feb '11

28 Feb '11

> > > > > DIAL IN INFORMATION: > > - Skype: +9900827044630912 > - North American Dial-In: +1-201-793-9022 > - Room Code: 4630912 > > > > AGENDA: > > 1. ADMINISTRATIVE: > > • Roll Call > > • Leadership Nominations > Pending quorum, votes can be held to finalize leadership positions. > > • Agenda Confirmation > > • Berlin F2F > > > 2. RSA / IdCollaboration Report > > 3. Progress on TFW projects document > > 4. AOB > > > > > > —> Anna Ticktin > > Technical Program Coordinator > anna(a)kantarainitiative.org > anna(a)ieee-isto.org > > On 25Feb2011, at 12:52 PM, Anna Ticktin wrote: > >> Hello All— >> >> This serves as a reminder that we will be convening our monthly BCTF-DG telcon Monday. The specific agenda will be forthcoming. >> >> Also, if you have not already done so, please forward any leadership nominations to staff(at)kantarainitiative(dot)com by 23:59 this Sunday. >> Pending quorum, we hope to hold a vote for DG leadership on the call. >> >> Many thanks. >> Please see dial-in instructions captured below. >> >> >> DATE: >> Mon 28 Feb 2011 >> >> TIME: >> 10:00 PT / 13:00 ET / 18:00 UTC >> >> DIAL IN: >> - Skype: +9900827044630912 >> - North American Dial-In: +1-201-793-9022 >> - Room Code: 4630912 >> >> >> >> >> —> Anna Ticktin >> >> Technical Program Coordinator >> anna(a)kantarainitiative.org >> anna(a)ieee-isto.org >> >

1 0

Reminder: BCTF DG Telecon Mon 28 Feb 2011 10:00 PT / 13:00 ET / 18:00 UTC
by Anna Ticktin 25 Feb '11

25 Feb '11

Hello All— This serves as a reminder that we will be convening our monthly BCTF-DG telcon Monday. The specific agenda will be forthcoming. Also, if you have not already done so, please forward any leadership nominations to staff(at)kantarainitiative(dot)com by 23:59 this Sunday. Pending quorum, we hope to hold a vote for DG leadership on the call. Many thanks. Please see dial-in instructions captured below. DATE: Mon 28 Feb 2011 TIME: 10:00 PT / 13:00 ET / 18:00 UTC DIAL IN: - Skype: +9900827044630912 - North American Dial-In: +1-201-793-9022 - Room Code: 4630912 —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 0

Kantara face-to-face meeting - securing agenda time fpr BCTF (May 16-18, Berlin)
by Rainer Hörbe 25 Feb '11

25 Feb '11

Who is planning to join the KI meeting in Berlin? That would be a good opportunity to meet and to present our interim findings to other Kantarians. Should we have no, 1 or 2 sessions? Topics for 2 sessions could be a) existing projects and b) Business Models/Cases. We could use open slots e.g.on Monday and Wednesday; EUM is meeting on Tuesday. Best regards Rainer Am 23.02.2011 um 21:23 schrieb Dervla O'Reilly: > Kantara's next face-to-face draft agenda is posted on the wiki: http://kantarainitiative.org/confluence/display/GI/Kantara+Initiative+Confe… > > Registration will go live tomorrow AM PST, Thursday, Feb. 24. > > Please let me know asap if you need time on the agenda. > > Our new registration page offers a full meeting price package (3-day) and a 1-day price package. I'd like to secure times and avoid moving anything on the agenda where possible - if someone pays for one day and we adjust timing, this creates a problem. > > Let me know if you have questions and thanks in advance for your timely response. > > Cheers, > Dervla > ________________________ > Dervla O’Reilly > Program Manager > Kantara Initiative > +1 415 731 4487 business > +1 415 948 3650 mobile > +1 509 757 4487 fax > dervla[at]kantarainitiative[dot]org > http://www.kantarainitiative.org > > Subscribe to the Kantara Initiative newsletter > > _______________________________________________ > LC mailing list > LC(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/lc

2 1

BCTF DG Leadership Nominations—PLEASE RESPOND
by Anna Ticktin 22 Feb '11

22 Feb '11

Hello All— This note is to inform the group that nominations are now open for Chair/Vice-Chair of the Business Cases for Trusted Federations Discussion Group (BCTF-DG). Per section 4.4 of the Operating Procedures, all participants are eligible for leadership positions. To highlight, a benefit of becoming a DG Chairman is a seat on the Leadership Council. Chairman duties are detailed in section 4.4.1 and 4.4.2 of the Operating Procedures Please send your recommendations to staff (at) kantarainitiative (dot) org. You may nominate yourself or any other participant. (For your reference, the BCTFDG participant roster is available HERE). Please include in your SUBJECT line "Nominations for BCTF-DG Leadership." Nominations will be open until 23:59 PDT Feb 27, 2010. At that time, we will compile the nominations, contact the nominees to confirm their interest in serving, and move forward with a ballot election. If you have any questions on this process, the associated duties, etc, please do not hesitate to contact staff (at) kantarainitiative (dot) org. Regards, —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

1 1

European Public Consultation on e-ID, e-authentication & e-signature
by Joni Brennan 21 Feb '11

21 Feb '11

Hello - This message is an FYI: The European Commission has published an online Public Consultation on electronic identification, authentication, signature and related trusted services or credentials. The online consultation runs until April 15th, 2011. We encourage WGs / DGs to respond. http://ec.europa.eu/yourvoice/ipm/forms/dispatch?form=eid4&lang=en Please also feel free to forward this message to any other interested parties I may have omitted on this message. Best Regards, =Joni Joni Brennan IEEE-ISTO Kantara Initiative | Executive Director voice:+1 732-226-4223 email: joni @ ieee-isto.org gtalk: jonibrennan skype: upon request Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

1 0

New document structure available
by Rainer Hörbe 09 Feb '11

09 Feb '11

As agreed in the last meeting, I moved the tables from the wiki document (Implemented Trust Frameworks) to new google docs. I added the content structure as discussed. The table itself is reduced to a smaller number of columns, and there is ample space in a semi-structured format below. I started adding projects that came to my attention during the last couple of month, and ask you to add projects that you know and extend/correct what I wrote. Joni has reservations about using google docs because google docs are not in the Kantara toolbox. She asked me to move the documents back to the wiki within 30 days. Let us use this deadline to add enough content to make the documents stable. To get edit access to the documents you need to request this from me - google documents does not allow do delegate privilege management to others, only the owner can manage. Best regards Rainer Hörbe

1 0

Fraunhofer FOKUS demo/labs at Kantara meeting May 16-18, 2011 Berlin
by Dervla O'Reilly 08 Feb '11

08 Feb '11

Fraunhofer FOKUS, our gracious meeting hosts, would like to showcase demo/labs at the Kantara Initiative meeting May 16-18 in Berlin. For those groups meeting in person - referencing the attached - can you let me know your top 5 and I will try to schedule to best fit our meeting agenda:http://kantarainitiative.org/confluence/display/GI/Kantara%20Initiat… Demos are 15-30 minutes, Labs could take up to 60 minutes. Fraunhofer FOKUS will provide a short overview in our opening session. Without taking away from groups meeting time, we may want to consider the lunch period. The welcome reception is onsite at the Fraunhofer institute, they are checking if they have the capability to offer demos at the reception. Cheers, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org Subscribe to the Kantara Initiative newsletter

1 1

FYI via simpleSAMLphp Fwd: Launching Federation Lab
by Joni Brennan 25 Jan '11

25 Jan '11

The announcement below may be of interest to the BCTF DG. Best Regards, =Joni ---------- Forwarded message ---------- From: Andreas Åkre Solberg <andreas.solberg(a)uninett.no> Date: 2011/1/25 Subject: Launching Federation Lab To: simplesamlphp(a)googlegroups.com I’m happy to make an early announcement of the availability of the Federation Lab toolkit. We would probably make a broader announcement after receiving feedback from the early testers. The initial set of tools and content available on Federation Lab is somewhat limited. There is plans for improving and extending the set of useful tool during the rest of the Identity Federation project period. If you have ideas for tools that would be useful, please tell us… What can you do with Federation Lab today? - You can login on Federation Lab using your existing Feide OpenIdP user account. Later on, we would like to connect the Federation Lab as a service provider to most european federation through eduGAIN. - A Service Provider Registry using SAMLmetaJS (javascript editor) for registering your test entities - Automated SAML Service Provider Tester: automated testing tool. - OpenIdP: Feide OpenIdP will automatically trust all test entities that are registered. A dedicated FedLab OpenIdP and TestShib are beeing configured soon… We will be contacting commercial vendors and offer them the opportunity to connect test IdPs to the FedLab. - Web-based SAML debugger. Encode and decode messages captured in the SAML flow. A new video screencast is available for those of you interested in learning about what this is, but not neccessarily wants to use the tool for yourself. https://rnd.feide.no/2011/01/25/launching-federation-lab/ We really want feedback on what you think about the Federation Lab. Kind regards Andreas Åkre Solberg GÉANT Identity Federation task leader UNINETT

1 0

Reminder: BCTF-DG Kick off call TODAY 10h PT / 13h ET / 19h CET
by Anna Ticktin 25 Jan '11

25 Jan '11

Hello All— This is to remind you of the Kick-Off call for the Business Cases for Trusted Federations Discussion Group. AGENDA: 1. Introduction & Overview 2. Proposed Scope and Deliverables: a) "List of Trust Framework Projects" b) "Analysis of Business Cases" • http://kantarainitiative.org/confluence/display/bctf/Implemented+Trust+Fram… 3. Formalization of telecon schedule 4. Leadership Nominations 5. AOB > DATE: Monday 24 January 2011 > > TIME: 10:00 PT / 13:00 ET / 18:00 UTC > > DIAL-IN: > > Skype: +9900827044630912 > > North American Dial-In: +1-201-793-9022 > Room Code: 4630912 > > International TOLL Dial-in: > Austria +43 (0) 82040115470 > Belgium +32 (0) 70357134 > Canada +1 (201) 793-9022 > France +33 (0) 826109071 > Germany +49 01805009527 > Ireland +353 (0) 818270968 > Italy +39 848390177 > Spain +34 (9) 02885791 > Switzerland +41 (0) 848560397 > United Kingdom +44 (0) 8454018081 —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

3 3

Kick-Off Telecon Monday 24 January 2011 10:00 PT / 13:00 ET / 18:00 UTC
by Anna Ticktin 17 Jan '11

17 Jan '11

Hello All— This note serves as notice of the Business Cases for Trusted Federations Discussion Group [BCTFDG] kick-off telecon. An agenda will be circulated in advance of the call addressing such items as : • Introduction & Overview • Formalization of telecom schedule • Leadership Nominations • AOB DATE: Monday 24 January 2011 TIME: 10:00 PT / 13:00 ET / 18:00 UTC DIAL-IN: Skype: +9900827044630912 North American Dial-In: +1-201-793-9022 Room Code: 4630912 International TOLL Dial-in: Austria +43 (0) 82040115470 Belgium +32 (0) 70357134 Canada +1 (201) 793-9022 France +33 (0) 826109071 Germany +49 01805009527 Ireland +353 (0) 818270968 Italy +39 848390177 Spain +34 (9) 02885791 Switzerland +41 (0) 848560397 United Kingdom +44 (0) 8454018081 Regards. —> Anna Ticktin Technical Program Coordinator anna(a)kantarainitiative.org anna(a)ieee-isto.org

2 1