October 2009 - DG-Concordia - mailman.kantarainitiative.org

Next weeks call canceled due to IIW
by Paul Madsen 28 Oct '09

28 Oct '09

I know that I'll be in Mountain View sitting in some circle clapping silently and expect that many other Concordians will be as well. Paul

1 0

Minutes from Oct 20 call
by Paul Madsen 22 Oct '09

22 Oct '09

http://kantarainitiative.org/confluence/display/concordia/Call+Oct+20+2009 Paul

1 0

AuthZ survey changes
by Tolbert, John W 21 Oct '09

21 Oct '09

I've "simplified" the choices somewhat, and added a few items based on the feedback. Please review at your leisure. Thanks http://kantarainitiative.org/confluence/display/concordia/Authorization+sur…

5 8

Draft of Assurance Survey
by Paul Madsen 20 Oct '09

20 Oct '09

For reference, it is this draft of the assurance survey that we will send to those previously identified as interview candidates in order to gather their feedback http://www.surveymonkey.com/s.aspx?sm=7l4_2fBoAF3NLUwxYl6QyK3Q_3d_3d You are of course welcome to look through and answer but be forewarned that we do not expect to actually collect & analyze any such answers. Paul

1 0

Agenda for Oct 20 Concordia DG call
by Paul Madsen 20 Oct '09

20 Oct '09

Hi , lets have a call at our existing time (we agreed on the last call that there was little value in moving times as no 'better' alternative emerged from the survey) - Tuesday, 20 Oct 2009 - UTC 5:30-6:30pm - Skype: +9900827044630912 - North American Dial-In: +1-201-793-9022 | Room Code: 4630912 - International numbers are on Concordia DG wiki page 0) Roll 1) Approval of minutes from last call http://kantarainitiative.org/confluence/display/concordia/Call+Oct+6+2009 2) Quorum situation (Joni) http://kantarainitiative.org/confluence/display/concordia/Participant+Roster 3) Co-chair status (Joni) - vote for approving NRI's Tatsuki Sakushima underway 4) LOA survey (Paul) - current status 5) Authz survey (John T) - http://kantarainitiative.org/confluence/display/concordia/Authorization+sur… - current status - next steps 6) SAML/OpenID proxying assurance guideline 7) Possible new work items - SAML/OAuth hybrid (Paul) - Metadata (Scott?) - whitelisting? (linked to above?) - others? 8) AOB

1 0

ELECTRONIC BALLOT for Concordia DG Co-Chair: Please vote by Oct. 26, 17:00 PT
by Joni Brennan 19 Oct '09

19 Oct '09

All-- The following nomination is being put forth for your vote. If you have elected to be a VOTING member, please respond to each item below. If you have no opinion, please also respond with a vote to ABSTAIN. If you have elected to be an OBSERVER member, there is no action to take at this time. NOTE: current voting status is available on the participant roster: http://kantarainitiative.org/confluence/display/concordia/Participant+Roster Thank you. 1. SUMMARY Tatsuki Sakushima, NRI has been nominated to serve as co-chair of the Concordia Discussion Group 2. TERMS Per section 2.6 of the Operating Procedures, this vote requires a Simple Majority vote, or at least 6 votes, to pass. 3. BALLOT CLOSE DATE Please mark and reply to staff @ kantarainitiative.org (or just reply to this message and I'll receive it). This ballot will remain open until Monday, Oct. 26, 17:00 PDT. 4. MOTION AND VOTE: I cast my ballot as follows regarding the election of Tatsuki Sakushima as co-chair of the Concordia Discussion Group. ________ YES ________ NO * ________ ABSTAIN * IF NO VOTE, Please include the rationale for your “no vote” to help facilitate resolution: ______________________________________________________________________________________________ 5. MEMBER NAME: _______________________________________________ -- Joni Brennan IEEE-ISTO Kantara Initiative Director of Technology Programs voice:+1 732-226-4223 email: joni @ ieee-isto.org gtalk: jonibrennan Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

3 3

Concordia Quorum Update
by Joni Brennan 15 Oct '09

15 Oct '09

Dear Concordians, Following on from our quorum clean up activities last week the quorum has been posted on the participation roster here. FYI the columns on the right also show attendance for the last 2 meetings. http://kantarainitiative.org/confluence/display/concordia/Participant+Roster Our quorum number is now 10. The list will be updated as participants join and leave quorum. Please feel free to let me know if you have any questions. Thanks! -- Joni Brennan IEEE-ISTO Kantara Initiative Director of Technology Programs voice:+1 732-226-4223 email: joni @ ieee-isto.org gtalk: jonibrennan Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community_kantarainitiative.o…

1 0

Active vs Observer participants
by Paul Madsen 08 Oct '09

08 Oct '09

All, the large number of participants in the Concordia DG makes achieving quorum for our various votes difficult. To facilitate managing quorum, going forward, we will distinguish between two categories of participants: ACTIVE & OBSERVER ACTIVE status affords members voting rights. Maintaining this status requires regular participation in all DG balloting and regular attendance on our telecons or an approved workaround. (The workaround is to support those whose schedule conflicts with our scheduled calls.) OBSERVER members do not have voting rights and so do not affect the numbers needed to achieve quorum. Removing OBSERVERs from the quorum count allows the working group to effectively conduct business. OBSERVERs may change to ACTIVE voting members either by attending a telecon (and indicating their desire for ACTIVE status) or by making other arrangements with the chair . OBSERVERs have every right to contribute to discussions and raise issues - the only constraint is voting. If necessary, any ACTIVE participant who misses 2 scheduled teleconferences may, at the discretion of the chair, be categorized as OBSERVER. (I'd prefer we not need to track this) If you wish to remain ACTIVE, please reply to this mail (ideally cc'ing Joni Brennan) by the end of this week to indicate so. If I do not receive your reply you will be categorized as OBSERVER (with the mechanisms described above to regain voting rights at your disposal) Thanks Paul p.s. all caps too much? Or did they give the right sense of gravitas? -- Paul Madsen e:paulmadsen @ ntt-at.com m:613-282-8647 web:connectid.blogspot.com ConnectID <http://feeds.feedburner.com/%7Er/blogspot/gMwy/%7E6/1>

6 6

[Fwd: [Wg-egov] Denmark releases profiles for identity-based web services (OIOIDWS)]
by Paul Madsen 07 Oct '09

07 Oct '09

I wonder how Concordia can claim some credit for the Denmark work - so wonderfully multi-protocol Too much to say we provided moral support? Paul -------- Original Message -------- Subject: [Wg-egov] Denmark releases profiles for identity-based web services (OIOIDWS) Date: Tue, 6 Oct 2009 18:23:56 +0200 From: Søren Peter Nielsen <spn(a)itst.dk> To: 'wg-egov(a)kantarainitiative.org' <wg-egov(a)kantarainitiative.org> Dear all, Just for your information In Denmark we now have formal approval from the Danish Public Sector Committee for Architecture & Standards to publish "OIO Identity-based Web Services version 1.0" which we abbreviate to OIOIDWS. OIOIDWS consist of the following set of profiles for SOAP-based web services: • OIO WS-Trust Profile – version 1.0 • OIO SAML Profile for Identity Tokens – version 1.0 • OIO Bootstrap Token Profile – version 1.0 • OIO WS-Trust Deployment Profile – version 1.0 • Liberty Basic SOAP Binding version 1.0 Final These profiles will be backed up with open source reference implementations in Java and .Net. A Web Service Consumer and a Web Serice Provider in Java can already be pulled from Softwarebørsen - http://bit.ly/oioidws and http://bit.ly/oiotrust Note that during the development of the profiles we have strived to make sure that it should be possible for the Web Service Consumer to get the security token from either an STS via WS-Trust or a Liberty Discovery Service via ID-WSF - However, we haven't tested using a Liberty Discovery Service. You can see the profiles (the actual documents are in English :-) here http://bit.ly/45tn4t - Note attached to this ressource there also is a scenarios document that illustrates different ways to use the profiles. Thx. Søren P _______________________________________________ Wg-egov mailing list Wg-egov(a)kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/wg-egov -- Paul Madsen e:paulmadsen @ ntt-at.com m:613-282-8647 web:connectid.blogspot.com ConnectID <http://feeds.feedburner.com/%7Er/blogspot/gMwy/%7E6/1> No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.420 / Virus Database: 270.14.4/2417 - Release Date: 10/06/09 06:50:00

1 0

Draft of a Deployment Guide for Proxying Assurance between OpenID & OAuth
by Paul Madsen 07 Oct '09

07 Oct '09

Hi, as discussed at Vegas, NRI & NTT have been working on the enclosed, essentially writing down the lessons learned about proxying between SAML AC & OpenID PAPE in the RSA IOP demo We're hoping for initial discussion within the Concordia DG, with a decision as to next steps (e.g. perhaps spin up a new WG in order to publish as a KI Recommendation...) to come. Feedback welcome Paul -- Paul Madsen e:paulmadsen @ ntt-at.com m:613-282-8647 web:connectid.blogspot.com ConnectID <http://feeds.feedburner.com/%7Er/blogspot/gMwy/%7E6/1>

2 2