- DG-Concordia - mailman.kantarainitiative.org

Fwd: Thank you for attending the Authorization Standards workshop at Burton Catalyst
by Paul Madsen 29 Jul '10

29 Jul '10

FYI on the Authz stds workshop (loosely branded as a Concordia event) held before Catalyst Paul -------- Original Message -------- Subject: Thank you for attending the Authorization Standards workshop at Burton Catalyst Date: Wed, 28 Jul 2010 14:04:16 -0700 From: Dervla O'Reilly <dervlaoreilly(a)me.com> To: Dervla O'Reilly <dervla(a)kantarainitiative.org> Many thanks to those of you who were able to attend the Authorization Standsrds workshop at Burton Catalyst yesterday. We hope you found the session informative and interesting. You can find the presentations online here: http://kantarainitiative.org/confluence/display/GI/Event+Presentations+and+… We appreciate your feedback on the session and encourage comments and input. Cheers, Dervla ________________________ Dervla O’Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org

1 0

Workshop at Catalyst
by Paul Madsen 13 Jul '10

13 Jul '10

Agenda at http://kantarainitiative.org/wordpress/2010/06/authorization-standards-work… Numbers are filling nicely so if you or colleagues might attend and wish to ensure a spot, please register with Dervla O’Reilly, dervla[at]kantarainitiative[dot]org paul

1 0

Re: [DG-Concordia] No discussion topics - no call
by Nat Sakimura 13 Jul '10

13 Jul '10

For the attribute exchange interoperability, the attribute URL discussion is very important. Also, how to indicate the desired language and script is important. At Id-plat.org, we have done some discussion around those. Namely, * Use fragment to express the language-Script-COUNTRY in ISO format. For example, http://axschema.org/namePerson#ja-Hani-JP means "namePerson (fullname)" in japanese-Kanji-of_Japan. Also, we have compiled some of the highly demanded attributes. I am attaching them in MS Word format. Regards, Nat (2010/06/29 7:28), Paul Madsen wrote: > I encourage people to bring forward new discussion topics. > > Until such time, there is little value in having a call > > Paul > _______________________________________________ > DG-Concordia mailing list > DG-Concordia(a)kantarainitiative.org > http://kantarainitiative.org/mailman/listinfo/dg-concordia > -- Nat Sakimura (n-sakimura(a)nri.co.jp) Nomura Research Institute, Ltd. Tel:+81-3-6274-1412 Fax:+81-3-6274-1547 本メールに含まれる情報は機密情報であり、宛先に記載されている方のみに送信することを意図しております。意図された受取人以外の方によるこれらの情報の開示、複製、再配布や転送など一切の利用が禁止されています。誤って本メールを受信された場合は、申し訳ございませんが、送信者までお知らせいただき、受信されたメールを削除していただきますようお願い致します。 PLEASE READ: The information contained in this e-mail is confidential and intended for the named recipient(s) only. If you are not an intended recipient of this e-mail, you are hereby notified that any review, dissemination, distribution or duplication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete your copy from your system.

3 10

No discussion topics - no call
by Paul Madsen 28 Jun '10

28 Jun '10

I encourage people to bring forward new discussion topics. Until such time, there is little value in having a call Paul

1 0

Fwd: Re: [KI-LC] Kantara Initiative Meeting, Paris Oct. 19-21
by Paul Madsen 28 Jun '10

28 Jun '10

Is there interest in Concordia meeting in Paris? -------- Original Message -------- Subject: Re: [KI-LC] Kantara Initiative Meeting, Paris Oct. 19-21 Date: Mon, 21 Jun 2010 13:52:10 -0700 From: Dervla O'Reilly <dervlaoreilly(a)me.com> To: LC(a)kantarainitiative.org Council <LC(a)kantarainitiative.org> LC members, A gentle nudge to you to all regarding meeting time slots for our Paris event. Can you confirm if and when you will need space for the meeting by this Friday, June 25? Cheers, Dervla On Jun 11, 2010, at 10:30 AM, Dervla O'Reilly wrote: > Dear LC, > > I'm following up regarding meeting time slots for our meeting at > Orange-FT office Oct. 19-21. Some of you have tentatively indicated > meeting needs - can you confirm your needs by Friday, June 25? > > I will create a registration page based on the updated agenda > (http://kantarainitiative.org/confluence/display/GI/Kantara+Initiative+Confe…) > > > Please note that BoT will meet all three days and the LC will meet day > 1 in the AM. > > Cheers, > Dervla > ________________________ > Dervla O’Reilly > Program Manager > Kantara Initiative > +1 415 731 4487 business > +1 415 948 3650 mobile > +1 509 757 4487 fax > dervla[at]kantarainitiative[dot]org > http://www.kantarainitiative.org >

1 1

Agenda items for a call tomorrow?
by Paul Madsen 15 Jun '10

15 Jun '10

Does anybody have any? Paul

1 1

Fwd: Re: [KI-LC] Call for Votes: Concordia DG Interim Report - Deployment Guide for Proxying Assurance between OpenID and SAML
by Paul Madsen 14 Jun '10

14 Jun '10

FYI, the 'Deployment Guide for Proxying Assurance between OpenID and SAML' passed the LC ballot Paul -------- Original Message -------- Subject: Re: [KI-LC] Call for Votes: Concordia DG Interim Report - Deployment Guide for Proxying Assurance between OpenID and SAML Date: Thu, 10 Jun 2010 14:13:41 -0400 From: Paul Madsen <paulmadsen(a)rogers.com> To: lc(a)kantarainitiative.org thanks On 10/06/2010 2:08 PM, J. Trent Adams wrote: > All - > > The motion carried with 8 "yes", 0 "no" and 1 "abstain", and is recorded > as Resolution 2010-06-08-A. > > Paul - > > Please let Staff know if you need help publishing the report. > > Congratulations Concordians. > > - Trent > > > J. Trent Adams wrote: > >> All - >> >> This is a call for you to vote on the following motion regarding the >> acceptance of an Interim Report from the Concordia Discussion Group. >> Please reply according to the options listed below. >> >> ----- >> MOTION: To accept the Concordia Discussion Group Interim Report titled >> "Deployment Guide for Proxying Assurance between OpenID and SAML" as >> submitted to the Leadership Council Secretary on June 1st, 2010. [1] >> ----- >> >> >> Your options: >> >> A. Reply with any discussion on this motion prior to voting. >> >> B. Reply to this message with a "YES" if you support the >> acceptance of the interim report. >> >> C. Reply to this message with a "NO" if you do not support >> accepting the interim report. Also, please include your >> rationale for a "NO" vote. >> >> D. Reply to this message with an "ABSTAIN" if you abstain. >> >> The deadline for voting is Tuesday, June 8th at 23:59 UTC. >> >> This vote requires a Simple Majority to pass (i.e. more than 50% of >> votes received - excluding abstentions). >> >> Thanks in advance, >> Trent >> >> [1] >> http://kantarainitiative.org/confluence/download/attachments/41650124/Kanta… >> >> >> >> > > > > > No virus found in this incoming message. > Checked by AVG -www.avg.com > Version: 9.0.829 / Virus Database: 271.1.1/2929 - Release Date: 06/10/10 02:35:00 > >

1 0

No call
by Paul Madsen 01 Jun '10

01 Jun '10

By coincidence, we have a planning call for the Catalyst Authz workshop at the same time as the normal Concordia call - soour normallly scheduled call is cancelled I'll send the call details to this list as well in case any lurkers might wish to join Paul

1 1

Deployment Guide for Proaxying Assurance between OpenID & SAML on wiki
by Paul Madsen 25 May '10

25 May '10

Hi, I created a section on the wiki for 'approved reports' and placed the proxying assurance deployment guide there http://kantarainitiative.org/confluence/display/concordia/Approved+Reports Regards Paul -- Paul Madsen connectid.blogspot.com NTT DATA AgileNet @paulmadsen paulmadsen(a)nttdata.com 6138588647

1 1

IAS-WG Meeting Is Scheduled
by Illingworth, Gavin 20 May '10

20 May '10

Please disregard my earlier e-mail. My PC crashed while I was writing the e-mail and I didn't even realize that it had been sent until Dervla replied. Our next conference call is scheduled for June 08, 9-10:30 PDT. Agenda: * Confirm April 27 minutes * Review the rest of John Tolbert's use cases that he went over during the April 27 conf call Call In Details Skype: +9900827044630912 US Dial-In: +1-201-793-9022 Room Code: 4630912 Fyi, Paul Madsen and his group are hosting an AuthZ workshop at Burton Catalyst Tuesday, July 27, 12-2:30pm As I understand it, they will be looking at trends in standards associated with AuthZ, and they are interested in use cases that may require extension or modification to them. We could help the group by submitting some of our more interesting examples for their consideration, prior to the workshop. In other words, John and I would appreciate any UC examples you care to submit to our website: http://kantarainitiative.org/confluence/display/ias/Home This is, tentatively, the workshop's objective: As authorization generally follows authentication in a given online transaction, standardization of authorization has generally followed that of web authentication standards like SAML, WS-Federation, and OpenID. This workshop will explore developments & trends in authorization standards, including OAuth (a community initiative now being standardized within the IETF), User-Managed Access (evolving within the Kantara Initiative) and XACML (an OASIS standard). We'll also look at some authorization use cases that may imply new requirements of these protocols. Through a combination of presentations, panels and demonstrations - we'll explore how these existing & emerging authorization standards fit into the enterprise & social web infrastructure. >From my own experience in the financial sector, there are some very challenging use cases coming out of new thinking about dynamic authentication/authorization across multiple channels eg. Online, ABM/ATMs, IVR, contact centres. That is, authorization levels are modulated by risk calculations that use input parameters such as customer assurance index levels, channel the request comes through, self-imposed preferences (e.g. I don't want to allow money transfers over my online banking), and even the location of the channel device. And how are we to manage such authorizations with respect to banking products/applications? Is it efficient to build dynamic entitlements on, say, a security token basis? Or is it better for policy to help determine a kind of filter (a filter of entitlements to app services) that would be enforced in the mid-tier between the channel and the back-end product? Some of our major applications have extremely high transaction rates - can security tokens with their complex protocols operate in such an environment? Another thing to consider is that, while the term 'adaptive authentication' is common, adaptive authorization isn't. In fact, once an initial authentication occurs over a channel, subsequent AuthZ events, triggered by a customer trying to do something, are highly inter-related with AuthN. For one thing, a high assurance (at registration time, because of his or her bona fides submitted to the bank) customer initially authenticating with strong credentials should get a wider set of entitlements than if that customer had a lower assurance index. We are in the process of figuring out how to design such a matrix. WG-IAS mailing list WG-IAS(a)kantarainitiative.org<mailto:WG-IAS@kantarainitiative.org> http://kantarainitiative.org/mailman/listinfo/wg-ias Gavin Illingworth Enterprise Architecture, Technology Development | BMO Financial Group | 120 Bloor St E, Toronto, ON M4W 3X1 Telephone: 416.513.5652 E-mail: gavin.illingworth(a)bmo.com<mailto:gavin.illingworth@bmo.com>

1 0