- LC - mailman.kantarainitiative.org

Kantara consolidated response to 800-63-4 2nd public draft
by Andrew Hughes 22 Aug '24

22 Aug '24

Hi everyone - Kantara will be submitting one consolidated set of comments to NIST for the 800-63-4 draft. Carol Buttle, Kantara's new frameworks and assurance expert will be coordinating our response using the IAWG as the discussion forum. I'm aware that most of Kantara's groups will have sections of importance to them - please funnel your inputs through IAWG. IAWG meets on Thursdays at noon Eastern time. IAWG has decided this timeline: - September 5 - focus on a big 2PD topic (TBD) - September 12 - focus on a big 2PD topic (TBD) - September 17 - IAWG comments due into Carol - September 19, 26, October 3 - discuss submission text - October 7 - Carol sends in our submission to NIST *Andrew Hughes *CISM mobile/signal +1 250.888.9474 AndrewHughes3000(a)gmail.com *https://www.linkedin.com/in/andrew-hughes-682058a <https://www.linkedin.com/in/andrew-hughes-682058a>*

1 0

Atlassian Security Advisory
by Salvatore D'Agostino 16 Jul '24

16 Jul '24

0 *H÷ 010 `He0 *H÷ $Content-Type: multipart/alternative; boundary="----=_NextPart_000_0050_01DAD781.75F0F690" This is a multipart message in MIME format. ------=_NextPart_000_0050_01DAD781.75F0F690 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I'd guess many people got the message. Here is the bulletin. https://confluence.atlassian.com/security/security-bulletin-july-16-2024-141 7150917.html IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com <https://idmachines.com/> Please note our new address. Email, phones, other contacts remain the same. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender. ------=_NextPart_000_0050_01DAD781.75F0F690 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META = HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 = (filtered medium)"><style></style></head><body lang=3DEN-US = link=3D"#467886" vlink=3D"#96607D" style=3D'word-wrap:break-word'><div = class=3DWordSection1>I’d guess many people got the = message.<o:p></o:p><o:p> </o:p>Here is the = bulletin.<o:p></o:p><o:p> </o:p><a = href=3D"https://confluence.atlassian.com/security/security-bulletin-july-= 16-2024-1417150917.html">https://confluence.atlassian.com/security/securi= ty-bulletin-july-16-2024-1417150917.html</a><o:p></o:p><o:p> </o:p>IDmachines<o:p></o:p></span= >4 Lamson = Place<o:p></o:p>Cambridge, MA = 02139-2612<o:p></o:p>+1 = 617.201.4809<o:p></o:p>@idmachines<o:p></o:p></spa= n><a = href=3D"https://idmachines.com/">https://idmachines.com</a><o:p></o:p></s= pan><o:p> </o:p>Please note our new = address. Email, phones, other contacts remain the = same.<o:p></o:p><o:p> </o:p>Disclaimer<o:p></o:p>The information contained in this communication from the sender is = confidential. It is inŠtended solely for use by the recipient and others = authorized to receive it. If you are not the recipient, you are hereby = notified that any disclosure, copying, distribution or taking action in = relation of the contents of this information is strictly prohibited and = may be unlawful. If you have received this email in error, please delete = it and advise the sender.<o:p></o:p></= span><o:p> </o:p><o:p> </o:p></div></body></html> ------=_NextPart_000_0050_01DAD781.75F0F690-- ü0`0H BE#ÈDµ0 *H÷ 0J10 UUS10U IdenTrust1'0%UIdenTrust Commercial Root CA 10 140116181223Z 340116181223Z0J10 UUS10U IdenTrust1'0%UIdenTrust Commercial Root CA 10"0 *H÷ 0 §PÞ?=Ô3FñoQa²©Og]ÙSÝ(Ù×ðÿ®Crùµ]|ÁBá1PtÑ |Í!«Câ¬^nó Z2œ¢ëùè\ ìÿÒ¯q³ŽSNïŒœìO20K^WÄSÂöÙb+¿$bßÃž)KIx<`"üÚ6ÈÂ¢Ô,Tg5ns¿Xð€Ýå°¢&zÊà6¥õý·ï®?@õmZýÎ4Ê$Üt#]3]Ä%ö0Ý]àÕGœŽë¡»IIØ[óä$äbOOÁ¯tšÑrjzIÌŽFyÆ±ÚYúu!eÝVÎû«¥`ÄùR°œù+# #v;÷3áÉóiùK¢àNŒ~9÷Dp~þZå±¬ÑÌò5åIIÊVÉ=û};ÁÂMÉO7é¡jßb.Ë5Qy,È%8ôúK§\Òã 9Jt|ÕYÂ?N\Rô=÷Rñê£¬ýI4(óA:îèÞÿ_ºËèò¹P`À1ÓsåïŸ í3tŸ ÄglðzUFN§ô>áöØ á3d+c×2^ùÀ{xoŒùxz×rtUtx±ºánpºO ºhÃ{ÿ1ðs==*±A þMeky3Ž×£B0@0Uÿ0Uÿ0ÿ0UíDÀÓðî€{ŸBç&TÈ6v0 *H÷ ®2öŠK|Dva'(Í^Tï%Œãù)×®háXï..~SR¶\êºP×ßa æÎÁò7x°_³¢sž8Í>°žûÀÏ±òì--Ììª³ª`-;Ã=WužÓ0Í`ÓTñMfÀ]t@£î~ÂwèÁ§]RíÉÝ%mú©í£:4ÐY{ÚíPó5¿íëM1Ç`ôÚñâHâÆÅ7ûúuYf1G)Úvé®ï¹Q÷#ib<åU6×Tÿñ¹]ÎÔ#oØEJ[eïÝ§ Ë¥%Ž ùð¢ÒôÈt¡*HeÛÄâ%}ëŸ[ TQJSì]Ê3íbýEÇ/[ÜX 9æú×þŠí=JBtÔÃwYsÍFŸU8ïúè2êX"Þ8ÃÌŒmÉ3:j i? Èêrc#œm<àILª¢¹*6xíÃèFâ&YDuÙuQÍa`Ë]ù"Mæãö[»®ÍÊJk^óQát+é~'§ÙINø¥Û%cbÉ3gk<ÆÞšÍð7qò«üAõÁì7] åNïú±\8¥JáÜ8-<Ü«ÕJîÑplÌîôWøºn00 @žáê<zÌ>BO0 *H÷ 0:10 UUS10U IdenTrust10UTrustID CA A140 240425192606Z 260426192506Z0M1!0 *H÷ sal(a)idmachines.com1(0&UA01410C0000018F16B8E1DC00130CBB0"0 *H÷ 0 êPV_FŒÞÇYÞ»1w@ ÿÈÈr/näœ»uoBŠZ@^üÈ »wýVá!ó}gk° >:¥4:ütÅe"°³XÉº&XºðpÓ²>ºEÍ?z ¬b^5á¯ôRiÓïVOgLaèÕ².úrÑF~ÃöÕ?ô5,ËÅú2¯áâœú"EÆšŽ5õ4Åk~CP*ÒfnTnhÄÈ*£}ÞIºÝ€VÛÄTÞÄEh\8ºº ù]BÊÑÈQi1¢/vNþŠÆk'5²;6ÿËènë®0 |=£00Uÿ00Uÿ 0+x0v00+0$http://commercial.ocsp.identrust.com0B+…U#0ÂÔD qÏHVŸh8\§·÷EŒ0#U 00 g0 `Hù/0EU>0<0: 8 64http://validation.identrust.com/crl/trustidcaa14.crl0U0sal(a)idmachines.com0U6(Óqï/ØD@Ø;lmXæSE~0U%0 +0 *H÷ °`ó0Äùê2`'3V-ŠÔý.ÛvéñNF$~L/2A2õþèC(á£Ãüûdï\×î ;!)GùÓ¬NÍÏÐÖ®êòrš¥%]TaË#ÑQ÷²Ö/ªÆÛä$]IÙNØCÓ*Yµ°ôHàî+ÈŠå£ªaóòœyJl[RU*wœZºé%¹v9N6¬N}íà³so4=µ#Ü)}MÅQWãQüÊoHÖþÿ©ðMoÃŠÌ^ªê,®j³± Li;I)¡Øâ&È:÷€ôÿÕç<fëñA±°ßÙm°x~š-Çu<Îý>>U±5íkªmÀÇÏë|Ô`îMEa³©)&sGriûi=Ñïfhµîuø$ÐqÃ 6ÅÆ<A<šÄÞAr7À¢dŒÀ£0ŠbZÍ»ÄÏž.î£ú§Bì)! Ûª¬Éã#jÕäbßúätâV\1èÑÄN ÓÝÝ ^ÐGÜ]šb¹ÜÞFûn}Ácô2ŽÅ]OÝ 1ö)ÉË ."La\W!!ìRj[Ø@ðÒ{ìKÆ+ÜZ3Ù%¯Áf{"ÀË7WF¯\¬1vyÓŽÄ0ô0Ü @ÿÒiÚwÂéÕMM0 *H÷ 0J10 UUS10U IdenTrust1'0%UIdenTrust Commercial Root CA 10 230816192846Z 330812192845Z0:10 UUS10U IdenTrust10UTrustID CA A140"0 *H÷ 0 è©õŒ±éäÙËíX€ËF`eð¬ûÃA`kX»0DÙ9bÜrÁñRñÕ×«²3È÷6u/!²Öa§? Œ§8lxn×î%ûf¬<²Ñ»X$=-Ÿà§ÆÍ£EðiùëžÅFÖ{ePH»òÒßqEK tG%£¹yP2`A6ìL[Nä\ÍÒ§»Ó À[:«CQR ãL|70ídj¢Et«¹}Ì u÷@ òxb× Æ°K=°1dªØØWÐ.ïvkª r Xý(bšFr|qG Ôñ³ÿ£|\3òÚtÈ:ÒXTßŒôBp`¡Â`@±[xoÄR^.W°ö@ÁÃé7¯Ì;Œ=Us¯Ø$YÂîníºË*tÅùÛò\ oþåê'Y. xp,¬\¿åù!³I.EÛË7ï¢±ßÔh[P:4£ÿ]|×2`vZXtZ+cÒŒ~ÚÖP!!4Ó3aózG]wËí=.DÜ"X¯jë]êq?å§â!»aææVBJFQCj)(ñ" êÀÈ"©&?žR§gßû--Ùùt=µK7w¬eÀ#×k%ã3Ö)ŠÁåwsšxh:ÂÝ 8Ÿmí&Û5®i"\OŽEÝ£ä0à0Uÿ0ÿ0Uÿ0+}0{00+0$http://commercial.ocsp.identrust.com0G+0;http://validation.identrust.com/roots/commercialrootca1.p7c0U#0íDÀÓðî€{ŸBç&TÈ6v0_U X0V0TU 0L0J+>https://secure.identrust.com/certificates/policy/ts/index.html0JUC0A0? = ;9http://validation.identrust.com/crl/commercialrootca1.crl0UÂÔD qÏHVŸh8\§·÷EŒ0AU%:08++ +7 +7 +7 0 *H÷ ò][i]ãR®hÝE#+ 9q7%,Lya`VRÐÛ|ìAs«ÊœkYPÄÜdw S_ÇS¡Šá°èö(1Ü@ žæŒ&tš-B9Ì§åÚTt³Ý¿xQ¿0_¬óã°lÏ>Çc@±]NDì[£]ùb9"fkj¬ØçÀÉ¬Å»µû]5O®šªJ}ø@/Sä":MÄ ¥ÜIpÎ-'- WÌ»/MNÎŸaŒ@,µtí ¿ÛøÎxÒ]ªK'Eh2»ëô¬EØÍìÁjìñK³Ô g£JGÌüž«b]aÕ6ì·»m>Ë¡Ér"HA)ãÔ®r"Dë$\4Áìwš"0ØëQ%DœÐgëZÏ]\×¹IŽ¶l#@0â èÜ;£_àº,÷íèjA=UéOÆ0üôÈÖAg!Y6 ô*s!YTÉŒ¿é©J^íxàÝN}ý+Š°L%Rmü?â/[ìs$ßÃÿeZ((ôjdÓ±x*EB;2SšDåêìÄXyÈÍÏ3ké/ÒysáÎZªf²žÍ~º£±}EÐ*)K]b8NU¢f1<080N0:10 UUS10U IdenTrust10UTrustID CA A14@žáê<zÌ>BO0 `He ¿0 *H÷ 1 *H÷ 0 *H÷ 1 240716170959Z0/ *H÷ 1" È©)v\ ¬·Ð*Ï±lÃÇOåü¶n;20] +71P0N0:10 UUS10U IdenTrust10UTrustID CA A14@žáê<zÌ>BO0_*H÷ 1P N0:10 UUS10U IdenTrust10UTrustID CA A14@žáê<zÌ>BO0 *H÷ 100 `He*0 `He0 *H÷ 0 `He0*H÷ 0 *H÷ @0 `He0 `He0 `He0+0 *H÷ rô3&UgÊyê<áÈ³OÒeIué¬ebäÇf\ìÜlÊÜXi[WÕ/šî1 & ö$TrÂ^¶ÈP:ªiÓ¡®§ÏœW®åm 2|+$YMÖ %ÍÊCMXÜ6«d 3ÈV×gL¯ Äü88§SÏ7;Šš=¶ Œz1Êaë D;Õky]A,gSl?0<ûM|Và!_àÃ4®-ápA¡Ò÷:"¯7PÊÕ;wÙŒø}·uU-ÎÌVÅ /¶ÆAiß/)imŸúŒü üo=¬54¹YõP8XyíU}

1 1

Collaboration
by Salvatore D'Agostino 12 Jul '24

12 Jul '24

Dear LC, The ANCR WG would like to meet with other Kantara WGs to see to what extent our work is complementary, and even interoperable with your efforts. The ANCR WG is working on a digital identity transparency code of conduct applicable to multiple WG efforts, that is incorporated into the Transparency Performance Scheme and Consent Receipt v2. We are also looking to implement a receipt demo building on an earlier version of the consent receipt generator that was supported by Kantara and to use the other works in the generation of the Kantara controller credential for those receipts, issued to WG members. Is it possible to have 15-30 minutes on an upcoming WG call to present the work. We would provide materials ahead of time including latest drafts of the scheme, controller credential, and consent receipt v2. Thanks, Sal IDmachines 4 Lamson Place Cambridge, MA 02139-2612 +1 617.201.4809 @idmachines https://idmachines.com<https://idmachines.com/> Please note our new address. Email, phones, other contacts remain the same. Disclaimer The information contained in this communication from the sender is confidential. It is intended solely for use by the recipient and others authorized to receive it. If you are not the recipient, you are hereby notified that any disclosure, copying, distribution or taking action in relation of the contents of this information is strictly prohibited and may be unlawful. If you have received this email in error, please delete it and advise the sender.

3 4

Cancelling July 16 Monthly LC meeting
by Alec L 11 Jul '24

11 Jul '24

Hi all, we're going to cancel our July meeting with a light agenda, and to make the most of the summer months! When we return in Aug, aiming to have a draft work plan for the LC group for the rest of the year. Please let me know if you have any thoughts/items you think should be on there Reach out if you have anything that needs attention See you in August! Best, - Alec Alec Laws CTO Engineering | IDENTOS Inc. [image: mobilePhone] (647)-822-1529 [image: emailAddress] alec(a)identos.ca [image: twitter] <https://twitter.com/identos_inc> [image: linkedin] <https://www.linkedin.com/company/identos-inc/>

1 0

How to think about AI - Harvard Law School | Harvard Law School
by Salvatore D'Agostino 08 Jul '24

08 Jul '24

https://hls.harvard.edu/today/how-to-think-about-ai/ Get Outlook for iOS<https://aka.ms/o0ukef>

3 7

Reminders for next week’s monthly leadership council
by John Wunderlich 18 Jun '24

18 Jun '24

Hello; This note is a gently (hopefully) reminder of a few things before next week’s monthly Leadership Council call in addition to the normal updates from each work or discussion group: 1. There an action item on AI Usage in the May Meeting Notes: Each chair will poll their group at an upcoming meeting and bring results back at the next LC monthly call (or via mailing list) - "Have you used Chat-gpt or other AI tools to help generate or contribute to any group content or reports?" 2. There will be a call to vote on a RIUP (Resilient Identifiers for Underserved Populations) work group report. I believe that the draft is here: https://docs.google.com/file/d/1xmySOBFzYXEEB_LhabT6sqvR_6fqhCs_/edit Please take this opportunity to read it and be prepared to vote. We should be posting the agenda for the LC later this week or on Monday. Have a better than expected day, John Wunderlich LinkedIn: https://www.linkedin.com/in/privacycdn/ Twitter: https://twitter.com/PrivacyCDN -- This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

5 5

Fwd: Seeking Co-hosting Partners for the mDL Community "Hackathons" in California
by Kay Chopard 17 Jun '24

17 Jun '24

Hello everyone, I received this invitation late last month, but I have been on the road for several weeks and didn't get it circulated to all of you. This is not the type of thing Kantara would typically engage in. However, many of you and your respective companies may be interested in participating in this event. If you have not received any information previously, please see the attached invitation. The contacts are with Gail Hodges and Lucy Yang. If you are interested in participating, please respond to them directly. Let me know if you have any questions. Thank you for your patience and support of Kantara. Kind regards, Kay *Kay Chopard | **Executive Director* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative ---------- Forwarded message --------- From: Hackathon <Hackathon(a)dmv.ca.gov> Date: Thu, May 23, 2024 at 11:23 AM Subject: Seeking Co-hosting Partners for the mDL Community "Hackathons" in California To: kay(a)kantarainitiative.org <kay(a)kantarainitiative.org> Dear Kay, We are excited to share with you the news of two upcoming community hackathons in California in September, aimed at promoting acceptance and usage of California’s mDL. *We are looking for co-hosting/co-funding partners to provide critical financial, technical, and logistical support* necessary to make the hackathons successful and beneficial for Californian residents, businesses and public agencies as well as the digital identity community as a whole. The California DMV has committed to supporting the hackathons and making the technical tooling developed for the *mDL pilot <https://www.dmv.ca.gov/portal/ca-dmv-wallet/>* available for hackathon participants. Attached is a brief with further details. If Kantara is interested in becoming a partner or have any feedback, please let us know by replying to this email. We look forward to having a conversation with you and answering any questions you have. Thanks, Lucy Yang & Gail Hodges Special Advisors (Identity Technologies) to the CA DMV

1 0

LC Monthly Call, next Tuesday, June 18th
by Amanda Gay 14 Jun '24

14 Jun '24

Hi all: Please take a look at the agenda <https://kantara.atlassian.net/wiki/spaces/LC/pages/517603370/2024-06-18+LC+…> for next week's call. In addition to standard WG reports, the main items are WG responses to the AI usage poll (informal) and voting on RIUP's DII report. Please reach out with any questions! -Amanda (and John) -- *Amanda Gay | **Administrative** Coordinator* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative

1 0

ANCR WG - The request for ISO/IEC 29184 Online privacy notice and consent to be free to access
by Mark Lizar 05 Jun '24

05 Jun '24

Dear Leadership Council, Your support of the request for ISO/IEC 29184 Online privacy notice and consent to be free to access The ANCR WG had a motion to support request for 29184 to free to access. As it is now the security and privacy controls in 29184 for notices are not available for the consent record framework in ANCR. This is why the ANCR WG motioned to support the request for 29184 to made open and to make it clear, that there is great demand, and even an urgent need for standardized digital transparency and Consent by Design. ANCR WG has identified a clear gap in trust of digital identity management driving demand for standards that enable people to manage their own digital identity and security risks. In this regard, an important request was made during the recent plenary in Manchester, UK: to make the ISO/IEC 29184 Online privacy notice and consent standard to be free to access. As our work on the Consent Receipt was specified to supplement this standard, without it bing free to access, we would not be able to directly use it. In addition, as this standard specifies transparency, it has a great value for the Consent by Design work at the ANCR WG. In fact, 29184 would provide excellent benchmarking criteria for regulators and policy makers, and with support of Kantara community we could make it possible for this consent work to fulfil its purpose of addressing misinformation in security, digital identity, AI and personal media management technology. For this purpose, on 28 May, I sought assistance from Canada’s National Mirror Committee for ISO/IEC in this effort. Below you can find a summary of my argument for doing so. Now we ask if the LC, and Kantara community will join in supporting this effort through the ISO/IEC liaison. You would not only be furthering our shared goal of enhancing digital privacy and transparency but also moving towards ensuring transparency and trust in digital identity practices worldwide. A topic in which there broad and growing consensus on, Thank you for your consideration. Mark / ANCR WG Why open access matters 29184 was developed to supplement the freely accessible ISO/IEC 29100 security and privacy techniques framework. Our work at the Kantara Initiative has long focused on standardizing notice to enable managed consent and control over data access on a large scale. This effort began more than a decade ago at the W3C - Do Not Track and Beyond conference, where Ashkan Soltani, Reuben Bins, and I presented on the need for notice and transparency standards in online security and privacy<https://www.w3.org/2012/dnt-ws/position-papers/23.pdf>. The business case for standardizing digital transparency There is a compelling business case for ISO/IEC to lead in standardizing digital transparency for security, privacy, and digital identity management. A robust set of international transparency standards would compel industries to adopt ISO/IEC’s paid security standards, such as 27001, 27002, and 27701. These standards provide specific requirements and guidance for establishing a Privacy Information Management System (PIMS). Acting now to facilitate data governance and security interoperability will enable ISO/IEC to lead this competitive practice internationally. International impact and interoperability Our commitment to this project is driven by 29100’s influence in developing international privacy instruments that are interoperable with GDPR and, importantly for Canada, the CoE Convention 108+. Expected to be ratified by 2025 latest, Convention 108+ will provide Canada with an international data governance instrument for security and privacy across the Commonwealth, encompassing 56 countries and 2.5 billion people. Convention 108+ mirrors the GDPR Chapter 1 Transparency Modalities section, and 29100 has been the only international standard we can use to create an international transparency standard that scales consent with identity management internationally. The implications for Kantara Last August, ISO/IEC 27560 Consent Record Information Structure was published, derived from the Kantara Consent Receipt V1.1 specification. This specification was designed to supplement both 29100 and 29184. When 29184 was published, the Consent Notice Receipt was included in Appendix B. Consequently, our work at Kantara on notice and consent receipts can contribute as a regulatory tool to assess the conformance and compliance of PII Controller notice records and credentials, benchmarking compliance with 29184 natively. In our ANCR WG, we developed a Transparency Performance Scheme for creating conformant PII Controller records, as a legal record of processing to assess the performance of transparency and legal validity of consent. To further this work and utilize 29184 for it to support an international standard for digital privacy transparency and consent (notice record and receipts), it, along with ISO/IEC 27560 consent record information structure must be open and freely available to use for public digital infrastructure.

1 0

Fwd: SIN 541519CSP Notice
by Kay Chopard 29 May '24

29 May '24

Hello everyone, The announcement for the new GSA SIN is out and live now. CSPs need to complete forms that can be found in idmanagement.gov, to get on the schedule. Also, please note that both state and federal government agencies are permitted to use the vendors on this schedule for credential services. So this extends Kantara-certified reach considerably. Please let me know if you have any questions. If you have thoughts about better ways to talk to companies and members about this let me know. Thanks for your support everyone. And to those of you who are CSPs - good luck! Best wishes, Kay *Kay Chopard | **Executive Director* *Twitter:* @KantaraNews *LinkedIn:* @KantaraInitiative On May 28, 2024, the General Services Administration (GSA) updated the Multiple Award Schedule with Refresh 21 <https://sam.gov/opp/6ed7287403a143fdaa9f3c53cc71d085/view> which contains the release of SIN 541519CSP - Credential Service Providers. Federal agencies have expressed interest in using SIN 541519CSP starting June 2024. Current MAS contract holders interested in the SIN are encouraged to contact their contracting officer for modification guidance. New offers should visit the GSA Roadmap to get a MAS contract <https://www.gsa.gov/buy-through-us/purchasing-programs/multiple-award-sched…>. The capabilities template is available on idmanagement.gov <https://www.idmanagement.gov/docs/credential-service-provider-capabilities-…>. For specific questions on the capabilities template please email icam-sin-review(a)gsa.gov.

1 0