December 2016 - DG-IDPro - mailman.kantarainitiative.org

-BoK-Subgroup#DartBoard Refinement
by Thorsten H. Niebuhr [WedaCon GmbH] 09 Jan '17

09 Jan '17

Hi all, During todays meeting (minutes here <https://kantarainitiative.org/confluence/pages/viewpage.action?pageId=85492…>) we discussed further refinements for the Dart- Board-Model, especially on the 'upper layer' which deals with Identity Management topics only, while relying on the lower three layers for operation,implementation,planning. Our next goal is to 'slice the cake', to find sublevels to the four TopLevels we decided to start with so far. The sublevels mentioned below (in green) are just examples. The best case scenario for this would be to find four generic terms within each of the TopLevels. * Identification Processes around validating identities (digital or physical) and as the 'entry'/'leave' point on a given domain.This does NOT deal with Authentication! o Proof/Verification o Register o De-Register o Data Portability (Transfer) * Management Processes around the management of Identity Data o Enrollment o Dis-Enrollment o Privacy o Federation * Authorization Processes related to Authorization o ... o ... o ... o ... * Authentication Processes related to Authentication o o ... o ... o ... Finally, to check the validity of the model, we will investigate typical IAM-Topics if we are able to find appropriate paths to describe the given topic in the model. here is a quick example on how I think this model could be applied (example used: 'Identity Provider') * Function of an 'Identity Provider' o Needs to offer functions from 'Identification' to + *validate* a given Identity against real or other digital data + Following *Process* ABC + using *technology* XYZ + ...further definitions on the *lower* layers (Operations, implementations,planning) + (do we need to add a*layer for legal* aspects?) o Management + ... o Authorization + ... o Authentication + ... So the Task (especially for those who gave their commitment to the BoK/Taxonomy) is to * Find propper sublevels as described above * exercise typical usecases from the IDM World against the model Thanks in advance, for the BoK-Subgroup Thorsten -- <http://www.wedacon.net> Thorsten H. Niebuhr tniebuhr(a)wedacon.net / tniebuhr(a)wedacon.de <mailto:tniebuhr@wedacon.net> WedaCon Informationstechnologien GmbH Office: +49 (251) 399 678-22 Fax: +49 (251) 399 678-50 Mobile: +49 (174) 991 257 4 Kroegerweg 29 D-48155 Muenster http://www.wedacon.net Amtsgericht Muenster HRB 6115 USt.-ID: DE216758544 StNr.: 336/5775/1487 Geschaeftsfuehrender Gesellschafter: Thorsten H. Niebuhr

5 10

Reminder: Kantara ID Pro Code of Conduct Meeting today 2pm ET
by Megan Cannon 21 Dec '16

21 Dec '16

Please join us for today's Code of Conduct Meeting: *Code of Conduct* *Tuesday, December 13, 2016* *2:00pm to 3:00pm Eastern* *Please join my meeting from your computer, tablet or smartphone.* https://global.gotomeeting.com/join/493642077 *You can also dial in using your phone.* United States +1 (312) 757-3129 *Access Code:* 493-642-077 *More phone numbers* Australia +61 2 8355 1040 Austria +43 7 2088 0034 Belgium +32 (0) 28 93 7018 Canada +1 (647) 497-9391 Denmark +45 69 91 89 28 Finland +358 (0) 923 17 0568 France +33 (0) 170 950 594 Germany +49 (0) 692 5736 7211 Ireland +353 (0) 15 360 728 Italy +39 0 247 92 13 01 Netherlands +31 (0) 208 080 219 New Zealand +64 9 280 6302 Norway +47 75 80 32 07 Spain +34 955 32 0845 Sweden +46 (0) 853 527 836 Switzerland +41 (0) 435 0167 13 United Kingdom +44 (0) 330 221 0088 First GoToMeeting? Try a test session: http://help.citrix.com/getready <http://help.citrix.com/getready>

5 6

Today's Kantara ID Pro DG Meeting CANCELLED
by Megan Cannon 21 Dec '16

21 Dec '16

Greetings all, Today's ID Pro DG Meeting is cancelled today. We will reconvene on *Thursday, January 5 at 12pm Eastern.* Have a restful week, and I look forward to speaking with all of you in the new year! Best, Megan

1 0

Reminder: Kantara ID Pro Code of Conduct Meeting today 2pm ET
by Megan Cannon 20 Dec '16

20 Dec '16

Please join us for today's ID Pro Code of Conduct Meeting: *Code of Conduct* *Tuesday, December 20, 2016* *2:00pm to 3:00pm Eastern* *Please join my meeting from your computer, tablet or smartphone.* https://global.gotomeeting.com/join/493642077 *You can also dial in using your phone.* United States +1 (312) 757-3129 *Access Code:* 493-642-077 *More phone numbers* Australia +61 2 8355 1040 <+61%202%208355%201040> Austria +43 7 2088 0034 Belgium +32 (0) 28 93 7018 Canada +1 (647) 497-9391 <%28647%29%20497-9391> Denmark +45 69 91 89 28 <+45%2069%2091%2089%2028> Finland +358 (0) 923 17 0568 France +33 (0) 170 950 594 Germany +49 (0) 692 5736 7211 Ireland +353 (0) 15 360 728 Italy +39 0 247 92 13 01 Netherlands +31 (0) 208 080 219 New Zealand +64 9 280 6302 <+64%209-280%206302> Norway +47 75 80 32 07 <+47%2075%2080%2032%2007> Spain +34 955 32 0845 <+34%20955%2032%2008%2045> Sweden +46 (0) 853 527 836 Switzerland +41 (0) 435 0167 13 United Kingdom +44 (0) 330 221 0088 First GoToMeeting? Try a test session: http://help.citrix.com/getready <http://help.citrix.com/getready>

2 1

Kantara ID Pro Working Group Meetings
by Megan Cannon 19 Dec '16

19 Dec '16

All, Below is a list of this week's ID Pro Working Group Meetings. Please note there are two meetings today. Dial in details are listed below; you may view the complete list of call details for each meeting by accessing the Kantara calendar <https://kantarainitiative.org/calendars/>. All the best, Megan *BoK/Taxonomy WG* *TODAY December 19, 2016* *12:00pm to 12:55pm Eastern* 1. Please join my meeting. https://global.gotomeeting.com/join/135593357 2. Use your microphone and speakers (VoIP) - a headset is recommended. Or, call in using your telephone. United States: +1 (571) 317-3116 <%28571%29%20317-3116> Australia: +61 2 8355 1034 <+61%202%208355%201034> Austria: +43 1 2060 92964 Belgium: +32 (0) 28 08 4372 Canada: +1 (647) 497-9372 <%28647%29%20497-9372> Denmark: +45 69 91 84 58 <+45%2069%2091%2084%2058> Finland: +358 (0) 923 17 0556 France: +33 (0) 170 950 590 Germany: +49 (0) 692 5736 7206 <+49%2069%20257367206> Ireland: +353 (0) 19 030 053 Italy: +39 0 699 26 68 65 Netherlands: +31 (0) 208 080 759 New Zealand: +64 9 974 9579 <+64%209-974%209579> Norway: +47 21 04 30 59 <+47%2021%2004%2030%2059> Spain: +34 931 76 1534 <+34%20931%2076%2015%2034> Sweden: +46 (0) 775 757 471 Switzerland: +41 (0) 435 0026 89 United Kingdom: +44 (0) 20 3713 5011 <+44%2020%203713%205011> Access Code: 135-593-357 Audio PIN: Shown after joining the meeting Meeting ID: 135-593-357 GoToMeeting® Online Meetings Made Easy® Not at your computer? Click the link to join this meeting from your iPhone®, iPad®, Android® or Windows Phone® device via the GoToMeeting app. *Governance WG* *TODAY December 19, 2016* *1:30pm to 2:00pm Eastern* Please join my meeting from your computer, tablet or smartphone. https://global.gotomeeting.com/join/747903453 You can also dial in using your phone. United States +1 (646) 749-3117 <%28646%29%20749-3117> Access Code: 747-903-453 More phone numbers Australia +61 2 8355 1039 <+61%202%208355%201039> Austria +43 7 2088 1033 Belgium +32 (0) 28 93 7001 Canada +1 (647) 497-9379 <%28647%29%20497-9379> Denmark +45 69 91 89 33 <+45%2069%2091%2089%2033> Finland +358 (0) 923 17 0555 France +33 (0) 170 950 585 Germany +49 (0) 692 5736 7301 <+49%2069%20257367301> Ireland +353 (0) 19 030 050 Italy +39 0 693 38 75 50 Netherlands +31 (0) 208 080 208 New Zealand +64 9 925 0481 <+64%209-925%200481> Norway +47 21 54 82 21 <+47%2021%2054%2082%2021> Spain +34 911 82 9890 <+34%20911%2082%2098%2090> Sweden +46 (0) 853 527 817 Switzerland +41 (0) 435 0167 65 United Kingdom +44 (0) 330 221 0099 <+44%20330%20221%200099> First GoToMeeting? Try a test session: http://help.citrix.com/getready *Code of Conduct* *Tuesday, December 20, 2016* *2:00pm to 3:00pm Eastern* *Please join my meeting from your computer, tablet or smartphone.* https://global.gotomeeting.com/join/493642077 *You can also dial in using your phone.* United States +1 (312) 757-3129 *Access Code:* 493-642-077 *More phone numbers* Australia +61 2 8355 1040 Austria +43 7 2088 0034 Belgium +32 (0) 28 93 7018 Canada +1 (647) 497-9391 Denmark +45 69 91 89 28 Finland +358 (0) 923 17 0568 France +33 (0) 170 950 594 Germany +49 (0) 692 5736 7211 Ireland +353 (0) 15 360 728 Italy +39 0 247 92 13 01 Netherlands +31 (0) 208 080 219 New Zealand +64 9 280 6302 Norway +47 75 80 32 07 Spain +34 955 32 0845 Sweden +46 (0) 853 527 836 Switzerland +41 (0) 435 0167 13 United Kingdom +44 (0) 330 221 0088 First GoToMeeting? Try a test session: http://help.citrix.com/getready <http://help.citrix.com/getready> *Membership and Services WG* *Date and Time TBD* *Please join my meeting from your computer, tablet or smartphone. * https://global.gotomeeting.com/join/322271101 <https://global.gotomeeting.com/join/322271101> *You can also dial in using your phone. * United States: +1 (646) 749-3129 <%28646%29%20749-3129> *Access Code: 322-271-101 * *More phone numbers * Canada: +1 (647) 497-9391 <%28647%29%20497-9391> Sweden: +46 (0) 853 527 836 United Kingdom: +44 (0) 330 221 0086 <+44%20330%20221%200086> First GoToMeeting? Try a test session: http://help.citrix.com/getready

1 0

CANCELLED: ID Pro Membership Models WG
by Megan Cannon 15 Dec '16

15 Dec '16

Hello all, Due to scheduling conflicts, we will cancel today's meeting and work to reschedule for next week. All the best, Megan +++++++++++++++++++++++ Greetings, Please join us at 2pm ET for the Membership Models meeting. Dial in details below: *ID Pro Membership * Thursday, Dec 15, 2016 2:00 PM - 3:00 PM EST *Please join my meeting from your computer, tablet or smartphone. * https://global.gotomeeting.com/join/322271101 <https://global.gotomeeting.com/join/322271101> *You can also dial in using your phone. * United States: +1 (646) 749-3129 <%28646%29%20749-3129> *Access Code: 322-271-101 * *More phone numbers * Canada: +1 (647) 497-9391 <%28647%29%20497-9391> Sweden: +46 (0) 853 527 836 United Kingdom: +44 (0) 330 221 0086 <+44%20330%20221%200086> First GoToMeeting? Try a test session: http://help.citrix.com/getready

1 0

Reminder: Kantara ID Pro Membership Models WG Today at 2pm ET
by Megan Cannon 15 Dec '16

15 Dec '16

Greetings, Please join us at 2pm ET for the Membership Models meeting. Dial in details below: *ID Pro Membership * Thursday, Dec 15, 2016 2:00 PM - 3:00 PM EST *Please join my meeting from your computer, tablet or smartphone. * https://global.gotomeeting.com/join/322271101 <https://global.gotomeeting.com/join/322271101> *You can also dial in using your phone. * United States: +1 (646) 749-3129 *Access Code: 322-271-101 * *More phone numbers * Canada: +1 (647) 497-9391 Sweden: +46 (0) 853 527 836 United Kingdom: +44 (0) 330 221 0086 First GoToMeeting? Try a test session: http://help.citrix.com/getready

1 0

Today's Kantara ID Pro DG Meeting CANCELED
by Megan Cannon 14 Dec '16

14 Dec '16

Greetings all, Today's ID Pro DG Meeting is cancelled today. Have a great week! Best, Megan

1 0

Code of Conduct
by Scott Shorter 13 Dec '16

13 Dec '16

Kaliya, I think I hear you. Yes, different frames can get in the way, that’s why forums for discussing different points of view (such as this one) are so valuable. Regarding the “auditor talk”, you caught me unintentionally straw-manning, Kaliya, thank you. I agree that nobody is suggesting mandatory bias audits. But I think it’s an open question whether the organization would seek to develop resources to assist members in self-assessing against the code, I would like to hear some discussion of that topic. I agree with the observations that bias is very difficult for people and organizations to self-assess. I would point out that the language in the code refers to “acts of discrimination” rather than bias, perhaps because overt acts are considerably more measurable than invisible qualities such as bias. Let me try to put it very plainly. As identity pros engineer their systems, they will build features to either assist or hinder those who want to use identity data for discriminatory purposes. I would prefer that the code of conduct give them a hint as to which way to do it. - Scott From: Kaliya Identity Woman <kaliya(a)identitywoman.net> Date: Wednesday, December 7, 2016 at 2:47 PM To: Scott Shorter <scott.shorter(a)kuma.pro> Cc: David Chadwick <D.W.Chadwick(a)kent.ac.uk>, "dg-idpro(a)kantarainitiative.org" <dg-idpro(a)kantarainitiative.org> Subject: Re: [DG-IDPro] Reminder: ID Pro Discussion Group meeting today at 11am ET On Wed, Dec 7, 2016 at 11:20 AM, Scott Shorter <scott.shorter(a)kuma.pro<mailto:scott.shorter@kuma.pro>> wrote: Greetings David and congratulations for the award and welcome to the conversation. I would say that gathering member compliance metrics about bias Sigh - this is where different frames get in the way. How do you know if you have bias or not? you have to look at it and measure it. It isn't about "compliance" in theway that one passes an audit. It is about how do we be better people and work towards the VERY LOFTY ideal seth forth in the conde of concudct around these isseus. If one is from the dominant cutlure in North American society one can not hope to actually "be" in alignement with teh aspiration of the code of conduct without doing some inner (reflective) and outer (practice) work around the issues. And it isn't comfortable either. or any other topic is NOT what the code of conduct should be used for, but I suppose it depends how active the ID Pro organization is envisioned to be in the enforcement of the code of conduct. Before we get to talking about enforcement - can we talk about skill building and trying to actually have 1) awareness 2) some skills 3) good skills I think what David was suggesting is people actually doing some kind of assessment that in aggreagate and gives metrics - not that you "pass or fail" on these things it is are you improving and are we as a communtiy improving. Applying the same rubric across the board, one might ask if the ID Pro organization will be responsible for actively monitoring relationships among members for conflict of interest violations. Let’s hear some opinions on that. Thoughts? Thanks! - Scott On 12/7/16, 1:59 PM, "David Chadwick" <D.W.Chadwick(a)kent.ac.uk<mailto:D.W.Chadwick@kent.ac.uk>> wrote: I was responsible for our department being awarded an Athena Swan Bronze Award, whose original objective was to increase the number of women in science and computing (see http://www.ecu.ac.uk/). I can agree with Kaliya that getting people to admit that bias exists is quite hard, getting them to see that unconscious bias exists is even harder, and getting them to change the processes and procedures so that they are bias free is harder still. We started on this path as a department three years ago and still have several more years ahead of us before we can assert that we are bias free. Writing anti-discrimination clauses into our ID-PRO code of conduct is a very noble aim, but it takes real effort and resources to make it happen. This implies that some of the annual membership fee should be directed towards this end, and that there are effective ways of measuring the amount of bias/non-bias in the members. Without metrics the whole process becomes a simple paper ticking exercise, which is somewhat pointless. regards David On 07/12/2016 18:18, Kaliya Identity Woman wrote: > > > On Wed, Dec 7, 2016 at 11:38 AM, Scott Shorter <scott.shorter(a)kuma.pro<mailto:scott.shorter@kuma.pro> > <mailto:scott.shorter@kuma.pro<mailto:scott.shorter@kuma.pro>>> wrote: > > Hi Kaliya,____ > > __ __ > > A fair question - identity and bias are certainly inter-related > issues. Who do you envision would be the recipient of such training? > > > The ID professionals you are suggesting follow this code of conduct. > > > > ____ > > > At a minimum, I would imagine that the code of conduct should > provoke some evaluation of actual and potential practices against > the objectives, which would be a good start. > > > Most ID Professionals that I have met do not have any good knowledge or > training around these issues. > > When I have brought issues up around these topics in professional > settings they make people VERY VERY uncomfortable. > > > > ____ > > __ __ > > Thanks for the input, > Scott____ > > __ __ > > *From: *Kaliya Identity Woman <kaliya(a)identitywoman.net<mailto:kaliya@identitywoman.net> > <mailto:kaliya@identitywoman.net<mailto:kaliya@identitywoman.net>>> > *Date: *Wednesday, December 7, 2016 at 12:19 PM > *To: *Scott Shorter <scott.shorter(a)kuma.pro<mailto:scott.shorter@kuma.pro> > <mailto:scott.shorter@kuma.pro<mailto:scott.shorter@kuma.pro>>> > *Cc: *Megan Cannon <megan(a)kantarainitiative.org<mailto:megan@kantarainitiative.org> > <mailto:megan@kantarainitiative.org<mailto:megan@kantarainitiative.org>>>, > "dg-idpro(a)kantarainitiative.org<mailto:dg-idpro@kantarainitiative.org> > <mailto:dg-idpro@kantarainitiative.org<mailto:dg-idpro@kantarainitiative.org>>" > <dg-idpro(a)kantarainitiative.org<mailto:dg-idpro@kantarainitiative.org> <mailto:dg-idpro@kantarainitiative.org<mailto:dg-idpro@kantarainitiative.org>>> > *Subject: *Re: [DG-IDPro] Reminder: ID Pro Discussion Group meeting > today at 11am ET____ > > __ __ > > Given this statement is in the code of conduct ____ > > __ __ > > __ __ > > __· __I will treat fairly all persons and not engage in acts > of discrimination based on race, religion, gender, disability, age, > citizenship, national origin, veteran status, sexual orientation, > gender identity, or gender expression."____ > > __ __ > > Are we as an organization going to be offering rigorous training > around how to address implicit bias? And understanding the dynamics > and issues that are in play when dealing with marginalized > communities. Relative to communities of color and people who are > white Americans this is sometimes called White Awareness Training or > Anti-Racism Training.____ > > __ __ > > There is similar work to be done around sexism (men relative to > women) and relative to gender identity issues. ____ > > __ __ > > Along with training to be aware of religion etc. ____ > > __ __ > > __ __ > > If we do not offer resources to live into the statements we should > not be making the statements a requirement of "the profession". ____ > > __ __ > > __ __ > > __ __ > > On Wed, Dec 7, 2016 at 9:14 AM, Scott Shorter > <scott.shorter(a)kuma.pro<mailto:scott.shorter@kuma.pro> <mailto:scott.shorter@kuma.pro<mailto:scott.shorter@kuma.pro>>> wrote:____ > > My apologies for missing the meeting, I had a prior conflict at > that time. The wiki is up to date with the status of the code > of conduct project > <https://kantarainitiative.org/confluence/display/idpro/Codes+of+Conduct+Spa…>. > Please let me know if any questions or comments came up.____ > > ____ > > Is 11am the new meeting time going forward? ____ > > ____ > > Regards,____ > > Scott____ > > ____ > > *From: *<dg-idpro-bounces(a)kantarainitiative.org<mailto:dg-idpro-bounces@kantarainitiative.org> > <mailto:dg-idpro-bounces@kantarainitiative.org<mailto:dg-idpro-bounces@kantarainitiative.org>>> on behalf of > Megan Cannon <megan(a)kantarainitiative.org<mailto:megan@kantarainitiative.org> > <mailto:megan@kantarainitiative.org<mailto:megan@kantarainitiative.org>>> > *Date: *Wednesday, December 7, 2016 at 9:07 AM > *To: *"dg-idpro(a)kantarainitiative.org<mailto:dg-idpro@kantarainitiative.org> > <mailto:dg-idpro@kantarainitiative.org<mailto:dg-idpro@kantarainitiative.org>>" > <dg-idpro(a)kantarainitiative.org<mailto:dg-idpro@kantarainitiative.org> > <mailto:dg-idpro@kantarainitiative.org<mailto:dg-idpro@kantarainitiative.org>>> > *Subject: *[DG-IDPro] Reminder: ID Pro Discussion Group meeting > today at 11am ET____ > > ____ > > Greetings,____ > > ____ > > Please join the Kantara ID Pro Discussion Group call today at > 11:00am ET.____ > > ____ > > The call details are below for your reference.____ > > ____ > > All the best,____ > > Megan____ > > ____ > > *Agenda:*____ > > * Project teams report out ____ > > o Body of Knowledge / Taxonomy - Thorsten Niebuhr____ > o Codes of Conduct / Practice - Scott Shorter____ > o Membership Models / Services - Giles Watkins____ > o Governance / Structure - Sarah Squire____ > > * Participation level discussion____ > > ____ > > * > ------------------------------------------------------------------------ > * > > ____ > > *Wednesday, December 7*____ > > *11:00am Eastern Standard Time (UTC -5h)*____ > > ____ > > *Please join my meeting from your computer, tablet or smartphone. > https://global.gotomeeting.com/join/747903453 > <https://global.gotomeeting.com/join/747903453> > * > *You can also dial in using your phone. > *United States +1 (646) 749-3117<tel:%2B1%20%28646%29%20749-3117> <tel:(646)%20749-3117> > > Access Code: 747-903-453 > > *More phone numbers > *Australia +61 2 8355 1039<tel:%2B61%202%208355%201039> <tel:+61%202%208355%201039> > Austria +43 7 2088 1033<tel:%2B43%207%202088%201033> > Belgium +32 (0) 28 93 7001<tel:%2B32%20%280%29%2028%2093%207001> > Canada +1 (647) 497-9379<tel:%2B1%20%28647%29%20497-9379> <tel:(647)%20497-9379> > Denmark +45 69 91 89 33 <tel:+45%2069%2091%2089%2033> > Finland +358 (0) 923 17 0555 > France +33 (0) 170 950 585 > Germany +49 (0) 692 5736 7301 <tel:+49%2069%20257367301> > Ireland +353 (0) 19 030 050 > Italy +39 0 693 38 75 50 > Netherlands +31 (0) 208 080 208 > New Zealand +64 9 925 0481 <tel:+64%209-925%200481> > Norway +47 21 54 82 21 <tel:+47%2021%2054%2082%2021> > Spain +34 911 82 9890 <tel:+34%20911%2082%2098%2090> > Sweden +46 (0) 853 527 817 > Switzerland +41 (0) 435 0167 65 > United Kingdom +44 (0) 330 221 0099 <tel:+44%20330%20221%200099> > > First GoToMeeting? Try a test > session: http://help.citrix.com/getready > <http://help.citrix.com/getready>____ > > > _______________________________________________ > DG-IDPro mailing list > DG-IDPro(a)kantarainitiative.org<mailto:DG-IDPro@kantarainitiative.org> > <mailto:DG-IDPro@kantarainitiative.org<mailto:DG-IDPro@kantarainitiative.org>> > http://kantarainitiative.org/mailman/listinfo/dg-idpro > <http://kantarainitiative.org/mailman/listinfo/dg-idpro>____ > > __ __ > > > > > _______________________________________________ > DG-IDPro mailing list > DG-IDPro(a)kantarainitiative.org<mailto:DG-IDPro@kantarainitiative.org> > http://kantarainitiative.org/mailman/listinfo/dg-idpro >

7 6

-BoK-Subgroup#DartBoard#Authorization
by Thorsten H. Niebuhr [WedaCon GmbH] 12 Dec '16

12 Dec '16

As already declared in the thread [DG-IDPro]-BoK-Subgroup#DartBoard#Identification, here is the next dicussion thread Someone who is willing to lead this? Thorsten

1 0