July 2015 - WG-UMA - mailman.kantarainitiative.org

W3C work-in-progress on ID credentials enables decentralized solutions
by Adrian Gropper 03 Aug '15

03 Aug '15

http://opencreds.org/specs/source/identity-credentials/#introduction Adrian

2 1

Results of issue nominations - still some preparation for us to do before next week
by Eve Maler 30 Jul '15

30 Jul '15

Thanks to everyone for a very productive issue nomination session. I’ve done a bit of consolidation in the spreadsheet <https://docs.google.com/spreadsheets/d/1s27E3JsHdvl_UzhGkQ8ZWP2dnyAXQAj5sxE…> that we were working on, and labeled the issues in GitHub <https://github.com/xmlgrrl/UMA-Specifications/issues> with “blocking”, “critical”, and “editorial” labels, and put everything we discussed under a “V1.0.1” milestone for now — we’ll see if we get to them all. I didn’t label the issues with the impact or breaking/non-breaking nature, because these are qualitative assessments that are mostly useful for prioritizing the order in which should tackle the issues. But I did use them to derive an order of attack (which was kind of fun to do…). I haven’t yet put assignments in GitHub, and therein lies the rub: We don’t yet have official champions on several key issues. Here’s a screenshot of the relevant snippet to give you an idea of what we’re up against. In order for us to fully discuss (and resolve??) issues 165, 153, 154, and possibly 160 on August 7, would the champion be Justin since he’s the one most wanting to change the status quo? (As agreed earlier, we don’t need to see perfect full spec text, but I think we’re ready to consider fairly mature proposals; we’ve gotten our heads around alternative options.) [a bit more below] (As an aside, for Maciej, I’m not sure if we’ll manage to transfer the repo to Kantara before we manage to get through this patch release, and I wonder if we should even try. I’d hate to lose the issue metadata, especially what I just put in. :-) Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

Draft minutes of UMA telecon 2015-07-30 (next meeting starts earlier and is 90 minutes)
by Eve Maler 30 Jul '15

30 Jul '15

http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-30 Minutes Roll call Quorum was reached. Minutes approval MOTION: Andi moves: Approve the minutes of UMA telecon 2015-07-23 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-23>. APPROVED by unanimous consent. Legal subgroup update The subgroup has formed! Weekly meetings throughout 2015 will be held Fridays at 8am PT. All are free to join. The informal mass noun is an "argument of lawyers" but officially it's a "galaxy of lawyers". A "dispute of lawyers"? Spec versioning process Maciej is working with Oliver on the process. Issue nominations for patch release V1.0.1 Issues on GitHub <https://github.com/xmlgrrl/UMA-Specifications/issues> (Rough) guidelines <https://docs.google.com/document/d/1c50top8X6Aqw3CEVeX_SD2THqO508ihs14QwLem…> for acceptance We worked on issue nominations in this spreadsheet <https://docs.google.com/spreadsheets/d/1s27E3JsHdvl_UzhGkQ8ZWP2dnyAXQAj5sxE…> and came to consensus on which issues to are potentially blocking and critical (and thus need to be given first priority), and which are low-impact (and thus need to be given second priority), and which we suspect are non-breaking. All others are to be given last priority, if we have time. For any issues without champions that need them, we should seek champions for issues in this order. Already-identified champions should prepare options, discussion points, or proposed solutions as warranted for the next calls in priority order. AI status AI: Thomas: Review the charter for potential revisions in this annual cycle. AI: Eve: Review Marcelo Wikipedia comments and take next actions. DONE; a colleague is helping out with making edits. AI: Sal: Investigate IP implications of formal liaison activities with other Kantara groups with the LC, and ultimately draft an LC Note as warranted. AI: Gil: Edit the UIG to add Ishan's content and excerpt it for Eve to add to the FAQ, pointing everyone to the UIG. AI: Sal: Fill out IDESG form to have UMA adopted as a recommended standard for use in the IDESG framework. AI: Mike: Write SCIM protection case study to highlight client claims-based use case. AI: Eve: Update GitHub. DONE; Maciej helped finish this one. AI: Maciej: Write as many sections for the UIG as he can. AI: Justin: Write a UIG section on default-deny and race conditions. Attendees As of 30 Jul 2015 (pre-meeting), quorum is 7 of 12. (François, Domenico, Sal, Thomas, Andi, Phani, Robert, Maciej, Eve, Arlene, Irwin, Mike) Eve Domenico Irwin "Varma" - from NL - something of an IAM "outsider" - working on an idea for identity services focusing on privacy and business needs, called JanusID - working with ForgeRock - UMA fits perfectly with JanusID concept Andi Arlene Robert Sal Maciej Mike Non-voting participants: Sarah Justin George James Phillpotts - senior engineer in ForgeRock - works on OpenAM - working on UMA AS Jin Adrian Scott Dazza Colin Regrets: Thomas Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

Agenda for UMA telecon 2015-07-30 (please be prepared with issue nominations)
by Eve Maler 29 Jul '15

29 Jul '15

http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-30 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-30> Date and Time Thu Jul 30 9-10am PT Voice: Skype: +99051000000481 or US +1-805-309-2350 (international dial-in lines <https://www.turbobridge.com/join.html>), room code 178-2540# Screen sharing: http://join.me/findthomas <http://join.me/findthomas> - NOTE: IGNORE the join.me dial-in line shown in favor of the dial-in info above (Kantara "line C" and the Skype line) UMA calendar: http://kantarainitiative.org/confluence/display/uma/Calendar <http://kantarainitiative.org/confluence/display/uma/Calendar> Agenda Roll call Minutes approval Sample motion: Approve the minutes of UMA telecon 2015-07-23 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-23>. Quick hits: Legal subgroup update Spec versioning process Issue nominations for patch release V1.0.1 Issues on GitHub <https://github.com/xmlgrrl/UMA-Specifications/issues> (Rough) guidelines <https://docs.google.com/document/d/1c50top8X6Aqw3CEVeX_SD2THqO508ihs14QwLem…> for acceptance AOB Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

New UMA Dev WG
by Eve Maler 28 Jul '15

28 Jul '15

The wiki for the new UMA Developer Resources WG is live (don’t miss Maciej’s artwork on the home page :-): http://kantarainitiative.org/confluence/display/umadev/Home If you’re interested to join, I hope you’ll take the opportunity! Eve Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

Introduction
by James Phillpotts 24 Jul '15

24 Jul '15

Hi all, I've just joined the UMA working group, so allow me to introduce myself. I'm a senior engineer at ForgeRock, based in Bristol in the UK. I'm the principal engineer responsible for the UMA implementation in our OpenAM product, which will be providing capabilities as an UMA AS in our next release. I hope to be able to join a few of the weekly calls, and look forward to getting to know everyone over the next few months. Cheers James Phillpotts

1 0

Calendar disruption should be just about done now
by Eve Maler 23 Jul '15

23 Jul '15

http://kantarainitiative.org/confluence/display/uma/Calendar If you didn’t get calendar invitations that you were expecting, let me know. If you’re a non-voting participant and you’d like to be added to the invites, send me private mail and I’ll add you (I now try to add new voting participants to the invites as a matter of course). I made the fresh calendar entries repeat just through the end of 2015 because I believe Google Calendar is sort of buggy when it comes to repeating entries that go “forever”. I also created fortnightly entries (thanks, Robert, for explaining British usage to me :-p ), starting on August 5/6, for all the APAC participants I’m aware of. I only invited "APAC-type people" to them. If I missed you and you’re located in a region for which those meetings are the only good ones for you, or you’re interested to have even *more* UMA meetings in your life, let me know and I can invite you too. Eve Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

IEEE Workshop on Privacy Engineering article on UMA published
by Eve Maler 23 Jul '15

23 Jul '15

Hi folks— FYI, My article on UMA, presented at IWPE’15 back in May, has finally been published: http://ieeexplore.ieee.org/xpl/articleDetails.jsp?arnumber=7163222 ($) The presentation slides are available linked from the event program, here: http://ieee-security.org/TC/SPW2015/IWPE/program.html Eve Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

4 3

Draft minutes of UMA telecon 2015-07-23 (next week: V1.0.1 issue nominations!)
by Eve Maler 23 Jul '15

23 Jul '15

http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-23 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-23> Minutes Roll call Quorum was reached. Minutes approval MOTION: Approve the minutes of UMA telecon 2015-06-25 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-06-25> and read into today's minutes the notes of UMA telecon 2015-07-01 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-01>, UMA telecon 2015-07-09 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-09>, and UMA telecon 2015-07-16 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-16>. APPROVED by unanimous consent. Macro, micro, and current-plan process We love the idea of treating the future UMA specification process agilely and as if it were software, and using GitHub for managing the process. Mike points out that Kantara already has a GitHub organization <https://github.com/KantaraInitiative>; let's use it. He's been using it for OTTO. Let's figure out the right process and ownership – and document it for use by other groups, Eve suggests. We need to do a final historical checkin on the xmlgrrl repo, and then move on with a native process. Sprint themes and priorities We're good with them. Logistics We plan to nominate issues to pull forward from the backlog on the next call. We will plan for 90-minute calls in August, starting 30 minutes earlier than the "normal" start time, with the "normal" hour being consider the "core" time to meet (recognizing that not everyone can change their schedules very dynamically). Eve will do a cleaning of the voting participation rolls and expects everyone to do their level best to attend in August (and beyond!). Plans for Independent Submission to IETF Should we now wait until V1.0.1 is at the Recommendation stage? Let's, in fact, have the conversation about the the added value of publishing the specs as IETF documents, with Nat and others. Justin recommends recalculating the cons vs. the pros of publishing through IETF, given that the documents may change and there are significant costs. AI status AI: Thomas: Review the charter for potential revisions in this annual cycle. AI: Eve: Review Marcelo Wikipedia comments and take next actions. AI: Sal: Investigate IP implications of formal liaison activities with other Kantara groups with the LC, and ultimately draft an LC Note as warranted. AI: Gil: Edit the UIG to add Ishan's content and excerpt it for Eve to add to the FAQ, pointing everyone to the UIG. AI: Sal: Fill out IDESG form to have UMA adopted as a recommended standard for use in the IDESG framework. AI: Mike: Write SCIM protection case study to highlight client claims-based use case. AI: Eve: Update GitHub. AI: Maciej: Write as many sections for the UIG as he can. AI: Justin: Write a UIG section on default-deny and race conditions. Attendees As of 1 Jul 2015 (pre-meeting), quorum is 7 of 13. (François, Domenico, Sal, Mark, Thomas, Andi, Ishan, Robert, Maciej, Eve, Arlene, Mike, Jin) Eve Arlene Robert Maciej Domenico Mike Sal Non-voting participants: Justin Sarah Scott Adrian Zhanna Regrets: Thomas Andi Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

Agenda for UMA telecon 2015-07-23
by Eve Maler 21 Jul '15

21 Jul '15

http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-23 Date and Time Thu Jul 23 9-10am PT Voice: Skype: +99051000000481 or US +1-805-309-2350 (international dial-in lines <https://www.turbobridge.com/join.html>), room code 178-2540# Screen sharing: http://join.me/findthomas <http://join.me/findthomas> - NOTE: IGNORE the join.me dial-in line shown in favor of the dial-in info above (Kantara "line C" and the Skype line) UMA calendar: http://kantarainitiative.org/confluence/display/uma/Calendar <http://kantarainitiative.org/confluence/display/uma/Calendar> Agenda Roll call Minutes approval Sample motion: Approve the minutes of UMA telecon 2015-06-25 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-06-25> and read into today's minutes the notes of UMA telecon 2015-07-01 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-01>, UMA telecon 2015-07-09 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-09>, and UMA telecon 2015-07-16 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-16>. Handling post-V1.0 issues Considering the proposal <https://docs.google.com/document/d/1c50top8X6Aqw3CEVeX_SD2THqO508ihs14QwLem…> on the table: can we reach consensus on an approach? Timeline and meeting schedule: e.g., extend the meeting times? can we consistently reach quorum? If time and consensus on the above: possible to take the first steps on issue nomination and selection? AOB Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0