- DG-Concordia - mailman.kantarainitiative.org

Agenda for Oct 20 Concordia DG call
by Paul Madsen 20 Oct '09

20 Oct '09

Hi , lets have a call at our existing time (we agreed on the last call that there was little value in moving times as no 'better' alternative emerged from the survey) - Tuesday, 20 Oct 2009 - UTC 5:30-6:30pm - Skype: +9900827044630912 - North American Dial-In: +1-201-793-9022 | Room Code: 4630912 - International numbers are on Concordia DG wiki page 0) Roll 1) Approval of minutes from last call http://kantarainitiative.org/confluence/display/concordia/Call+Oct+6+2009 2) Quorum situation (Joni) http://kantarainitiative.org/confluence/display/concordia/Participant+Roster 3) Co-chair status (Joni) - vote for approving NRI's Tatsuki Sakushima underway 4) LOA survey (Paul) - current status 5) Authz survey (John T) - http://kantarainitiative.org/confluence/display/concordia/Authorization+sur… - current status - next steps 6) SAML/OpenID proxying assurance guideline 7) Possible new work items - SAML/OAuth hybrid (Paul) - Metadata (Scott?) - whitelisting? (linked to above?) - others? 8) AOB

1 0

ELECTRONIC BALLOT for Concordia DG Co-Chair: Please vote by Oct. 26, 17:00 PT
by Joni Brennan 19 Oct '09

19 Oct '09

All-- The following nomination is being put forth for your vote. If you have elected to be a VOTING member, please respond to each item below. If you have no opinion, please also respond with a vote to ABSTAIN. If you have elected to be an OBSERVER member, there is no action to take at this time. NOTE: current voting status is available on the participant roster: http://kantarainitiative.org/confluence/display/concordia/Participant+Roster Thank you. 1. SUMMARY Tatsuki Sakushima, NRI has been nominated to serve as co-chair of the Concordia Discussion Group 2. TERMS Per section 2.6 of the Operating Procedures, this vote requires a Simple Majority vote, or at least 6 votes, to pass. 3. BALLOT CLOSE DATE Please mark and reply to staff @ kantarainitiative.org (or just reply to this message and I'll receive it). This ballot will remain open until Monday, Oct. 26, 17:00 PDT. 4. MOTION AND VOTE: I cast my ballot as follows regarding the election of Tatsuki Sakushima as co-chair of the Concordia Discussion Group. ________ YES ________ NO * ________ ABSTAIN * IF NO VOTE, Please include the rationale for your “no vote” to help facilitate resolution: ______________________________________________________________________________________________ 5. MEMBER NAME: _______________________________________________ -- Joni Brennan IEEE-ISTO Kantara Initiative Director of Technology Programs voice:+1 732-226-4223 email: joni @ ieee-isto.org gtalk: jonibrennan Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community

3 3

Concordia Quorum Update
by Joni Brennan 15 Oct '09

15 Oct '09

Dear Concordians, Following on from our quorum clean up activities last week the quorum has been posted on the participation roster here. FYI the columns on the right also show attendance for the last 2 meetings. http://kantarainitiative.org/confluence/display/concordia/Participant+Roster Our quorum number is now 10. The list will be updated as participants join and leave quorum. Please feel free to let me know if you have any questions. Thanks! -- Joni Brennan IEEE-ISTO Kantara Initiative Director of Technology Programs voice:+1 732-226-4223 email: joni @ ieee-isto.org gtalk: jonibrennan Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community_kantarainitiative.o…

1 0

Active vs Observer participants
by Paul Madsen 08 Oct '09

08 Oct '09

All, the large number of participants in the Concordia DG makes achieving quorum for our various votes difficult. To facilitate managing quorum, going forward, we will distinguish between two categories of participants: ACTIVE & OBSERVER ACTIVE status affords members voting rights. Maintaining this status requires regular participation in all DG balloting and regular attendance on our telecons or an approved workaround. (The workaround is to support those whose schedule conflicts with our scheduled calls.) OBSERVER members do not have voting rights and so do not affect the numbers needed to achieve quorum. Removing OBSERVERs from the quorum count allows the working group to effectively conduct business. OBSERVERs may change to ACTIVE voting members either by attending a telecon (and indicating their desire for ACTIVE status) or by making other arrangements with the chair . OBSERVERs have every right to contribute to discussions and raise issues - the only constraint is voting. If necessary, any ACTIVE participant who misses 2 scheduled teleconferences may, at the discretion of the chair, be categorized as OBSERVER. (I'd prefer we not need to track this) If you wish to remain ACTIVE, please reply to this mail (ideally cc'ing Joni Brennan) by the end of this week to indicate so. If I do not receive your reply you will be categorized as OBSERVER (with the mechanisms described above to regain voting rights at your disposal) Thanks Paul p.s. all caps too much? Or did they give the right sense of gravitas? -- Paul Madsen e:paulmadsen @ ntt-at.com m:613-282-8647 web:connectid.blogspot.com ConnectID <http://feeds.feedburner.com/%7Er/blogspot/gMwy/%7E6/1>

6 6

[Fwd: [Wg-egov] Denmark releases profiles for identity-based web services (OIOIDWS)]
by Paul Madsen 07 Oct '09

07 Oct '09

I wonder how Concordia can claim some credit for the Denmark work - so wonderfully multi-protocol Too much to say we provided moral support? Paul -------- Original Message -------- Subject: [Wg-egov] Denmark releases profiles for identity-based web services (OIOIDWS) Date: Tue, 6 Oct 2009 18:23:56 +0200 From: Søren Peter Nielsen <spn(a)itst.dk> To: 'wg-egov(a)kantarainitiative.org' <wg-egov(a)kantarainitiative.org> Dear all, Just for your information In Denmark we now have formal approval from the Danish Public Sector Committee for Architecture & Standards to publish "OIO Identity-based Web Services version 1.0" which we abbreviate to OIOIDWS. OIOIDWS consist of the following set of profiles for SOAP-based web services: • OIO WS-Trust Profile – version 1.0 • OIO SAML Profile for Identity Tokens – version 1.0 • OIO Bootstrap Token Profile – version 1.0 • OIO WS-Trust Deployment Profile – version 1.0 • Liberty Basic SOAP Binding version 1.0 Final These profiles will be backed up with open source reference implementations in Java and .Net. A Web Service Consumer and a Web Serice Provider in Java can already be pulled from Softwarebørsen - http://bit.ly/oioidws and http://bit.ly/oiotrust Note that during the development of the profiles we have strived to make sure that it should be possible for the Web Service Consumer to get the security token from either an STS via WS-Trust or a Liberty Discovery Service via ID-WSF - However, we haven't tested using a Liberty Discovery Service. You can see the profiles (the actual documents are in English :-) here http://bit.ly/45tn4t - Note attached to this ressource there also is a scenarios document that illustrates different ways to use the profiles. Thx. Søren P _______________________________________________ Wg-egov mailing list Wg-egov(a)kantarainitiative.org http://kantarainitiative.org/mailman/listinfo/wg-egov -- Paul Madsen e:paulmadsen @ ntt-at.com m:613-282-8647 web:connectid.blogspot.com ConnectID <http://feeds.feedburner.com/%7Er/blogspot/gMwy/%7E6/1> No virus found in this incoming message. Checked by AVG - www.avg.com Version: 8.5.420 / Virus Database: 270.14.4/2417 - Release Date: 10/06/09 06:50:00

1 0

Draft of a Deployment Guide for Proxying Assurance between OpenID & OAuth
by Paul Madsen 07 Oct '09

07 Oct '09

Hi, as discussed at Vegas, NRI & NTT have been working on the enclosed, essentially writing down the lessons learned about proxying between SAML AC & OpenID PAPE in the RSA IOP demo We're hoping for initial discussion within the Concordia DG, with a decision as to next steps (e.g. perhaps spin up a new WG in order to publish as a KI Recommendation...) to come. Feedback welcome Paul -- Paul Madsen e:paulmadsen @ ntt-at.com m:613-282-8647 web:connectid.blogspot.com ConnectID <http://feeds.feedburner.com/%7Er/blogspot/gMwy/%7E6/1>

2 2

Attribute assurance survey questions
by Eve Maler 06 Oct '09

06 Oct '09

Here are the questions I administered as the exercise for my XML Summer School lecture on federated identity. My comments on how they went over, and other comments based on our phone conversation today, are in [brackets]. [We need to add an introductory paragraph that explains what we're trying to accomplish here, something like: The Concordia group is examining the needs of enterprise and consumer application development organizations when it comes to "outsourcing" the provisioning of important user identity data to other applications or services, and having the necessary degree of confidence that this data is accurate and current. In federated identity, this sort of outsourcing is called "attribute exchange". We invite you to fill out the survey to help us work within the identity community to address your needs better.] [We need to add a maximum of 5 demographic "establishment questions" that we can use on all future surveys, as well as allow people to optionally give us their name, email, and permission to contact them for further in-depth inquiries. I think we should assign this one to Ari. :-)] Thinking about identity data used in your applications for authorisation or personalisation, for each identity data item: What is the nature of the data? [People asked for clarification. What I meant, in brute-force fashion, was "What is the data item?" E.g., blood type, home address, etc.?] What is the nature and role of the application in your organisation? [People asked for clarification. What I meant, in brute-force fashion, was "What does the application do?"] What effect does the data have on application behavior? [E.g., does it control authorization? does it personalize the app? etc.] What are the consequences if the data is incorrect? [e.g., spoiled user experience, incorrect diagnosis, death??] What party is truly authoritative for that data? [In brute-force fashion: Who has the responsibility for providing the data item? Who has the least incentive to lie about it? Who has the most incentive to get it right?...] Is there a role for self-assertion or self-service in data provisioning and updating? [This is phrased in a somewhat geeky fashion. In brute-force fashion: Do the people about whom the data item have the opportunity to set and update its value themselves?] If you are not the authoritative party, how and how often do you get the data today? [This is really batch vs. run-time provisioning. Also, note that I asked "if you are not the authoritative party" because I was asking a roomful of people, who may not be RPs today, to fill out the questionnaire.] What is your business relationship with the authoritative party? What is your remediation strategy and workflow for incorrect data? [This is phrased in stilted fashion, but isn't truly geeky.] [On the call we agreed we need a final question, something like: What questions should we have asked you to get to the root of your issues around confidence in outsourced data? What other comments can you share with us?] Eve Maler eve(a)xmlgrrl.com http://www.xmlgrrl.com/blog

2 1

Teleconference Audio Quality Today?
by Joni Brennan 06 Oct '09

06 Oct '09

Dear Concordians, As the dial-in number we used to day is new we'd like to know how your call sound quality experience was today. If any of you heard interference, static, loss of audio etc please let us know. Also, if so, please tell us if you were on skype or land line. Finally, if you had great quality you can tell us that too =). If you have a moment, please ping me with that feedback off list. Cheers! -- Joni Brennan IEEE-ISTO Kantara Initiative Director of Technology Programs voice:+1 732-226-4223 email: joni @ ieee-isto.org gtalk: jonibrennan Join the conversation on the community@ list - http://kantarainitiative.org/mailman/listinfo/community_kantarainitiative.o…

1 0

(NEW NUMBER) Agenda for Oct 6 Concordia DG call
by Paul Madsen 06 Oct '09

06 Oct '09

Hi all, pending a possible change to the call schedule (Item #3 below), lets have a call tomorrow at our existing time Please note: we have a new phone number. Kantara has moved to a new conference service that appears to have resolved the technical issues we were confronting. - Tuesday, 6 Oct 2009 - 10:30-11:30am PT / 1:30-2:30pm ET / 6:30-7:30pm UK /7:30-8:30pm CET / 5:30-6:30am NZ (next day) - Skype: ++9900827044630912 - North American Dial-In: +1-201-793-9022 | Room Code: 4630912 - International numbers are on Concordia DG wiki page 0) Roll 1) Approval of minutes from Vegas - http://kantarainitiative.org/confluence/display/concordia/Las+Vegas+Sept+16… 2) Status of nominations for Co-chair (Joni) 3) Poll for call schedule (Paul) - responses are at http://bit.ly/GSm3i (Sept 28-Oct 02 representative) - is there a 'mandate' for change? - Friday 11am EST as possibility 4) LOA survey (Eve?) - list of interviewees - as identified in Vegas minutes - Eve found some others at XML school - interview team for each of above 5) Authz survey (John T) - http://kantarainitiative.org/confluence/display/concordia/Authorization+sur… - current status - next steps 6) Possible new work items - SAML/OAuth hybrid (Paul) - Metadata (Scott?) - whitelisting? (linked to above?) - others? 7) AOB -- Paul Madsen e:paulmadsen @ ntt-at.com web:connectid.blogspot.com ConnectID <http://feeds.feedburner.com/%7Er/blogspot/gMwy/%7E6/1>

3 3