February 2017 - DG-IDPro - mailman.kantarainitiative.org

ID Pro Body of Knowledge - please contribute
by Andrew Hughes 08 Mar '17

08 Mar '17

Hi everyone - the people attending BoK calls have drafted the linked document. It's the highest-levels of a taxonomy and starting items for the body of knowledge. This link gives you 'Comment' permissions on the google document. Please add suggestions add comments to help us make progress. https://docs.google.com/document/d/1HNLZginMaRtFdraQTpVkdJ6z8Aj86cM_87TE6T5… This is one of the essential artifacts of the ID Pro organization - it defines the scope of the endeavor and anchors all the other activities. Please help by contributing to define what it means to be an ID Pro - or someone else will do it for you :) andrew. *Andrew Hughes *CISM CISSP Independent Consultant *In Turn Information Management Consulting* o +1 650.209.7542 m +1 250.888.9474 1249 Palmer Road, Victoria, BC V8P 2H8 AndrewHughes3000(a)gmail.com ca.linkedin.com/pub/andrew-hughes/a/58/682/ *Identity Management | IT Governance | Information Security *

3 4

FW: Re: FW: Re: EDIT MODE link to ID Pro Taxonomy/BoK Doc
by Dobbs, George 06 Mar '17

06 Mar '17

All, Made some comments and edits to the document – of course for further review etc. …. George Dobbs, George<mailto:gdobbs@massmutual.com> February 22, 2017 at 12:18 PM From: Dobbs, George Sent: Wednesday, February 22, 2017 12:17 PM To: Dobbs, George <gdobbs(a)massmutual.com><mailto:gdobbs@massmutual.com> Subject: FW: [EXTERNAL]Re: EDIT MODE link to ID Pro Taxonomy/BoK Doc From: Andrew Hughes [mailto:andrewhughes3000@gmail.com] Sent: Sunday, February 12, 2017 11:58 AM To: Stu Lincoln <stu(a)stulincoln.com<mailto:stu@stulincoln.com>> Cc: Thorsten H. Niebuhr [WedaCon GmbH] <tniebuhr(a)wedacon.net<mailto:tniebuhr@wedacon.net>>; catherine.schulten(a)lifemedid.com<mailto:catherine.schulten@lifemedid.com>; Dobbs, George <gdobbs(a)massmutual.com<mailto:gdobbs@massmutual.com>>; Janelle Allen <janelle(a)sharpshootn.com<mailto:janelle@sharpshootn.com>>; Megan Cannon <mcannon(a)virtualmgmt.com<mailto:mcannon@virtualmgmt.com>>; Colin Wallis <colin(a)kantarainitiative.org<mailto:colin@kantarainitiative.org>>; IDProSC(a)kantarainitiative.org<mailto:IDProSC@kantarainitiative.org> Subject: [EXTERNAL]Re: EDIT MODE link to ID Pro Taxonomy/BoK Doc OK - I have commented back on the comments and additions to date. Looking good so far andrew. Andrew Hughes CISM CISSP Independent Consultant In Turn Information Management Consulting o +1 650.209.7542 m +1 250.888.9474 1249 Palmer Road, Victoria, BC V8P 2H8 AndrewHughes3000(a)gmail.com<mailto:AndrewHughes3000@gmail.com> ca.linkedin.com/pub/andrew-hughes/a/58/682/<http://ca.linkedin.com/pub/andrew-hughes/a/58/682/> Identity Management | IT Governance | Information Security On Sat, Feb 11, 2017 at 4:33 PM, Stu Lincoln <stu(a)stulincoln.com<mailto:stu@stulincoln.com>> wrote: **** This message was sent securely via TLS encryption. **** This e-mail transmission may contain information that is proprietary, privileged and/or confidential and is intended exclusively for the person(s) to whom it is addressed. Any use, copying, retention or disclosure by any person other than the intended recipient or the intended recipient's designees is strictly prohibited. If you are not the intended recipient or their designee, please notify the sender immediately by return e-mail and delete all copies. Sent from Postbox<https://www.postbox-inc.com/?utm_source=email&utm_medium=siglink&utm_campai…> This e-mail transmission may contain information that is proprietary, privileged and/or confidential and is intended exclusively for the person(s) to whom it is addressed. Any use, copying, retention or disclosure by any person other than the intended recipient or the intended recipient's designees is strictly prohibited. If you are not the intended recipient or their designee, please notify the sender immediately by return e-mail and delete all copies.

2 1

Detroit IAM User Group Meeting
by Steve Giovannetti 28 Feb '17

28 Feb '17

Hello Everyone, I'm going to be speaking at the Detroit IAM User Group Meeting this Thursday. I may have some time to give an "elevator pitch" for IDPro. I'm new to this effort so I was wondering if there were some materials or information I could impart to help spread the word. My initial plan was to send everyone to https://kantarainitiative.org/digital_identity_professional/. Is that sufficient? Is there a better shortened URL? Regards, Steve Giovannetti CTO & Founder Hub City Media, Inc.

1 0

ID Pro BoK / Taxonomy meeting cancelled
by Megan Cannon 27 Feb '17

27 Feb '17

Hello all, Today's BoK/Taxonomy meeting is cancelled. Have a great week! Best, Megan

1 0

Fwd: Reminder: IDPro DG meeting, TODAY: Wednesday, Feb 22 12pm ET
by Megan Cannon 22 Feb '17

22 Feb '17

Reminder - please join us today! Hello all, Please join us for the ID Pro Discussion Group meeting on Wednesday, February 22 at 12pm ET. The dial in details are below for you convenience. I look forward to speaking with you then! All the best, Megan ___________________________________________________________ Please join my meeting from your computer, tablet or smartphone. https://global.gotomeeting.com/join/747903453 You can also dial in using your phone. United States +1 (646) 749-3117 <(646)%20749-3117> Access Code: 747-903-453 More phone numbers Australia +61 2 8355 1039 <+61%202%208355%201039> Austria +43 7 2088 1033 Belgium +32 (0) 28 93 7001 Canada +1 (647) 497-9379 <(647)%20497-9379> Denmark +45 69 91 89 33 <+45%2069%2091%2089%2033> Finland +358 (0) 923 17 0555 France +33 (0) 170 950 585 Germany +49 (0) 692 5736 7301 <+49%2069%20257367301> Ireland +353 (0) 19 030 050 Italy +39 0 693 38 75 50 Netherlands +31 (0) 208 080 208 New Zealand +64 9 925 0481 <+64%209-925%200481> Norway +47 21 54 82 21 <+47%2021%2054%2082%2021> Spain +34 911 82 9890 <+34%20911%2082%2098%2090> Sweden +46 (0) 853 527 817 Switzerland +41 (0) 435 0167 65 United Kingdom +44 (0) 330 221 0099 <+44%20330%20221%200099>

1 0

Reminder: IDPro DG meeting, Wednesday, Feb 22 12pm ET
by Megan Cannon 20 Feb '17

20 Feb '17

Hello all, Please join us for the ID Pro Discussion Group meeting on Wednesday, February 22 at 12pm ET. The dial in details are below for you convenience. I look forward to speaking with you then! All the best, Megan ___________________________________________________________ Please join my meeting from your computer, tablet or smartphone. https://global.gotomeeting.com/join/747903453 You can also dial in using your phone. United States +1 (646) 749-3117 Access Code: 747-903-453 More phone numbers Australia +61 2 8355 1039 Austria +43 7 2088 1033 Belgium +32 (0) 28 93 7001 Canada +1 (647) 497-9379 Denmark +45 69 91 89 33 Finland +358 (0) 923 17 0555 France +33 (0) 170 950 585 Germany +49 (0) 692 5736 7301 Ireland +353 (0) 19 030 050 Italy +39 0 693 38 75 50 Netherlands +31 (0) 208 080 208 New Zealand +64 9 925 0481 Norway +47 21 54 82 21 Spain +34 911 82 9890 Sweden +46 (0) 853 527 817 Switzerland +41 (0) 435 0167 65 United Kingdom +44 (0) 330 221 0099

1 0

BoK: Authorization taxonomy
by Andrew Hughes 09 Feb '17

09 Feb '17

Hi folks, here's my imperfect taxonomy for 'areas related to authorization and access control that an ID Pro should know about'. Please help to put the items in the right spots and correct errors! - Authorization - - Authorization policy evaluation - - Proofs of assertion (tokens, tickets, cookies, cryptographic methods) - - Bearer methods v proof of possession methods - Access control policy, authorization policy, - Static evaluation, dynamic evaluation - Is there an ‘authorization equation’ for policy evaluation? - - e.g. Given an identified entity and a requested resource, select the correctly-scoped authorization policy, evaluate the policy, grant || deny || require trust elevation for the resource access, log the events - Relationship to Identification, Authentication, Access Control - - The characteristics of each - The 'cross-over' aspects of each (e.g. OAuth-style authentication via proof of resource access - is this related to an ‘authorization equation’ approach?) - Authorization models, processes, protocols - - SAML, OAuth, UMA - Directories, decentralized models - Access control models - - RBAC - ABAC - Trust Elevation (e.g. re-authentication, step-up authentication, claims gathering) - Considerations for choosing specific models, protocols - - Risk - Authorization model matching to credential characteristics, identification method, available authenticators - Centralized v decentralized - Degree of independence of authorization policy decision v access control decision *Andrew Hughes *CISM CISSP Independent Consultant *In Turn Information Management Consulting* o +1 650.209.7542 m +1 250.888.9474 1249 Palmer Road, Victoria, BC V8P 2H8 AndrewHughes3000(a)gmail.com ca.linkedin.com/pub/andrew-hughes/a/58/682/ *Identity Management | IT Governance | Information Security *

9 15

RSA Conference IDPro Birds of a Feather Session Thursday Feb 16 at 7am
by Sarah Squire 09 Feb '17

09 Feb '17

Happy Monday, Identerati! I will be leading a Birds of a Feather discussion at RSA on IDPro. If you have a full conference pass, and plan to be far enough over your hangover to be awake at 7am Thursday, please join us! Here is the official event page with logistics and location information: https://www.rsaconference.com/events/us17/agenda/sessions/7993-Rise-of-the-… The plan currently is to re-open the discussion group for sign ups, and encourage attendees to participate in the formation of the organization as well as update them on the progress of the current working groups, particularly membership and services. Please let me know if you plan to attend. Cheers, Sarah Sarah Squire Engage Identity http://engageidentity.com

9 10

Reminder: Member/Services WG meeting today, 12pm ET
by Megan Cannon 07 Feb '17

07 Feb '17

All, Please join us for the Member/Services WG meeting today. Dial in details are listed below; you may view the complete list of call details for each meeting by accessing the Kantara calendar <https://kantarainitiative.org/calendars/>. All the best, Megan *Membership and Services WG* *Tuesday, February 7, 2017* *12:00pm-1:00pm Eastern* Join from PC, Mac, Linux, iOS or Android: https://zoom.us/j/664265541 Or iPhone one-tap (US Toll): +14086380968 <%28408%29%20638-0968>,664265541# or +16465588656 <%28646%29%20558-8656>,664265541# Or Telephone: Dial: +1 408 638 0968 <%28408%29%20638-0968> (US Toll) or +1 646 558 8656 <%28646%29%20558-8656> (US Toll) Meeting ID: 664 265 541 International numbers available: https://zoom.us/zoomconference?m=5I- PIFsuIQa5HhuotqRJmrbYCS-ujnOU

1 0

Canceled Event: Turbo A: ID Pro BoK/Taxonomy WG @ Mon Feb 13, 2017 11am - 12pm (EST) (dg-idpro@kantarainitiative.org)
by kantarainitiative＠gmail.com 06 Feb '17

06 Feb '17

This event has been canceled and removed from your calendar. Title: Turbo A: ID Pro BoK/Taxonomy WG https://panel.turbobridge.com/webcall/ (use your computer to connect directly to the call) North America Toll: +1 (805) 309-2350 Alternate Toll: +1 (714) 551-9842 International Toll: http://www.turbobridge.com/international.html Conference ID: 402-2737 When: Mon Feb 13, 2017 11am – 12pm Eastern Time Calendar: dg-idpro(a)kantarainitiative.org Who: (Guest list has been hidden at organizer's request) Invitation from Google Calendar: https://www.google.com/calendar/ You are receiving this courtesy email at the account dg-idpro(a)kantarainitiative.org because you are an attendee of this event. To stop receiving future updates for this event, decline this event. Alternatively you can sign up for a Google account at https://www.google.com/calendar/ and control your notification settings for your entire calendar. Forwarding this invitation could allow any recipient to modify your RSVP response. Learn more at https://support.google.com/calendar/answer/37135#forwarding

1 0