March 2022 - WG-UMA - mailman.kantarainitiative.org

Draft minutes of UMA telecon 2022-03-31
by Alec Laws 05 Apr '22

05 Apr '22

https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-03-31 MinutesRoll call - Quorum: Yes Approve minutes - Approve minutes of UMA telecon 2021-09-09 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-09-09> , UMA telecon 2021-09-16 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-09-16> , UMA telecon 2021-09-23 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-09-23> , UMA telecon 2021-09-30 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-09-30> , UMA telecon 2021-10-14 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-10-14> , UMA telecon 2021-10-21 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-10-21> , UMA telecon 2021-10-28 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-10-28> , UMA telecon 2021-11-04 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-11-04> , UMA telecon 2021-11-18 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-11-18> , UMA telecon 2021-12-02 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-12-02> , UMA telecon 2021-12-09 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-12-09> , UMA telecon 2021-12-16 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-12-16> , UMA telecon 2021-12-23 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-12-23> , UMA telecon 2021-12-23 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-12-23> , UMA telecon 2022-01-06 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-01-06> , UMA telecon 2022-01-13 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-01-13> , UMA telecon 2022-01-20 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-01-20> , UMA telecon 2022-01-27 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-01-27> , UMA telecon 2022-02-03 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-02-03> , UMA telecon 2022-02-10 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-02-10> , UMA telecon 2022-02-17 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-02-17> , UMA telecon 2022-02-24 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-02-24> , UMA telecon 2022-03-03 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-03-03> . UMA telecon 2022-03-10 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-03-10> , UMA telecon 2022-03-24 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-03-24> Andi motions to approve ALL the minutes! Sal seconds. Motion Approved Julie Use-case Report Have resolved current comments, link to V0.2 Editor's Draft: Julie Use-case Report <https://kantarainitiative.org/confluence/display/uma/Julie+Use-case+Report> Alec motions to move the Report to a Working Group Draft. Andi Seconds. Hearing no objections, motions passes! Thanks to all the editor's and contributors who got the report to this point!! UMA and Other Standards (UDAP, etc) This sheets starts to organize the comparison https://docs.google.com/spreadsheets/d/1UWxhLoLFsVNmHulGvyS_3vx5hF9u2reFXT3… The HEART WG is having a session on this topic, will be April 4 2-3PM ET. Link and invite should be shared on the oidc heart mailing list: https://meet.goto.com/785234357 <https://www.google.com/url?q=https://meet.goto.com/785234357&sa=D&source=ca…> Eve, Nancy and Alec plan to attend. Show UMAs understanding in relation to other standards. Could we introduce UMA to the HL7 connectathons? *Correlated Authorization Updates* https://github.com/umalabs/correlated-authorization European Identity Conference <https://www.kuppingercole.com/events/eic2022> May 10-13, 2022 | Berlin Kantara has a 4-hour workshop the day before the conference. Is anyone planning to attend in person? Steve, Andi, George Do we want some of that time to present/get feedback on some of our work? Eg to review and solicit feedback on the Julie report Potential Future Work Items / Meeting Topics - UMA vs (OAuth, OIDC, GNAP, UDAP, ....) - compare protocols & features (eg a product comparison type matrix with [image: (tick)] and [image: (error)] 's) - Confluence clean up, archive old items and promote the latest & greatest - Review of the email-poc correlated authorization specification - A financial use-case report (following the Julie healthcare template) - either open banking or pensions dashboard - openbanking is to FHIR(data model) as FAPI is to SMARTonFHIR(authZ protocol profile) Upcoming Conferences - Internet Identity Workshop <https://internetidentityworkshop.com/> 34 is April 26-28 | Mountain View, CA. UMA attendees: Alec, Steve(tentative), George - Identity North Spring Workshop Apr 4-6 - European Identity Conference <https://www.kuppingercole.com/events/eic2022> May 10-13, 2022 | Berlin - https://identiverse.com/ June 21-24, 2022 Denver, Colorado. AOB Have had questions about UMA + DID and their relationships Some OAuth folks see UMA as complex, and can rebuild the features with OAuth drafts UMA is for wide ecosystems where the RO can control policy. OAuth doesn't go this far, everything is still oriented around 1AS/1RS - ticket is an auth_code, and an auth_code also binds a lot of server side state. ticket is a more reusable/general conception of an auth_code - there is an Oauth 'step-up model' that is more RS first, eg to upgrade or get new access tokens, when the presented one is missing enough something (eg authN) - it is possible to use Grant or FedAuthZ independently - maybe a profile of UMA to make it "look" like Oauth would help introduce people to UMA (and not see it as extra complexity) - if you limit UMA scope: i) ask for resource ii) sent to prearranged AS iii) claims gathering - open source UMA impls: keycloak, gluu - Could we present an UMA use-case and ask how it could be solved in OAuth? - Alec could host at IIW Attendees As of October 26, 2020, quorum <http://kantarainitiative.org/confluence/display/uma/Participant+Roster> is 5 of 9. (Michael, Domenico, Peter, Sal, Thomas, Andi, Alec, Eve, Steve) Voting: - Andi - Alec - Sal - Domenico - Steve - Eve Non-voting participants: - Hanfei - George - Nancy - Scott - Chris Regrets:

2 1

Agenda for UMA telecon 2022-03-31
by Alec Laws 30 Mar '22

30 Mar '22

https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-03-31 Date and Time - *Primary-week Thursdays 06:30am PT*; Secondary-week Thursdays 10:00am PT - Screenshare and dial-in: https://zoom.us/j/99487814311?pwd=dTAvZi9uN0ZmeXJReWRrc1Zycm5KZz09 - United States: +1 (224) 501-3316, Access Code: 485-071-053 - See UMA calendar for additional details: http://kantarainitiative.org/confluence/display/uma/Calendar Agenda - Approve minutes since UMA telecon 2021-09-09 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-09-09> - Kantara Workshop at European Identity Conference <https://www.kuppingercole.com/events/eic2022> - Julie Use-case Report - UMA and Other Standards (UDAP, etc) - Correlated Authorization - AOB

1 0

Agenda for UMA telecon 2022-03-24
by Alec Laws 23 Mar '22

23 Mar '22

https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-03-24 UMA telecon 2022-03-24Date and Time - Primary-week Thursdays 06:30am PT; *Secondary-week Thursdays 10:00am PT* - Screenshare and dial-in: https://zoom.us/j/99487814311?pwd=dTAvZi9uN0ZmeXJReWRrc1Zycm5KZz09 - United States: +1 (224) 501-3316, Access Code: 485-071-053 - See UMA calendar for additional details: http://kantarainitiative.org/confluence/display/uma/Calendar Agenda - Approve minutes since UMA telecon 2021-09-09 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-09-09> - Julie Use-case Report - UMA and Other Standards (UDAP, etc) - Correlated Authorization - AOB

3 2

Agenda for UMA telecon 2022-03-10
by Alec Laws 09 Mar '22

09 Mar '22

1 0

Julie Use-Case Report
by Alec Laws 07 Mar '22

07 Mar '22

There is an Editor's Draft now ready for wider review! Major thanks to Nancy and Eve for getting it to this point! A PDF can be found on our wiki here <https://kantarainitiative.org/confluence/display/uma/Julie+Use-case+Report?…> And the source google doc can be found here <https://docs.google.com/document/d/1aG88GJMxOdYoEjQIAyzoTrUnFud-cnpmPD1rt9X…> (I will respond to access requests as I see them) *For our voting members*, we would like to move this to a Working Group Draft at this week's meeting. *Please let me know if you are unable to attend this thursday* - it is the alternate week time 1PM ET Cheers, - Alec

1 0

Draft minutes of UMA telecon 2022-03-03
by Alec Laws 03 Mar '22

03 Mar '22

https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-03-03 Minutes Roll call - Quorum: No Approve minutes - Approve minutes of UMA telecon 2021-09-09 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-09-09> , UMA telecon 2021-09-16 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-09-16> , UMA telecon 2021-09-23 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-09-23> , UMA telecon 2021-09-30 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-09-30> , UMA telecon 2021-10-14 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-10-14> , UMA telecon 2021-10-21 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-10-21> , UMA telecon 2021-10-28 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-10-28> , UMA telecon 2021-11-04 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-11-04> , UMA telecon 2021-11-18 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-11-18> , UMA telecon 2021-12-02 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-12-02> , UMA telecon 2021-12-09 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-12-09> , UMA telecon 2021-12-16 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-12-16> , UMA telecon 2021-12-23 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-12-23> , UMA telecon 2021-12-23 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2021-12-23> , UMA telecon 2022-01-06 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-01-06> , UMA telecon 2022-01-13 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-01-13> , UMA telecon 2022-01-20 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-01-20> , UMA telecon 2022-01-27 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-01-27> , UMA telecon 2022-02-03 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-02-03> , UMA telecon 2022-02-10 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-02-10> , UMA telecon 2022-02-17 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-02-17> , UMA telecon 2022-02-24 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2022-02-24> Deferred Review progress on Julie Use-case Report Julie Use-case Report <https://kantarainitiative.org/confluence/display/uma/Julie+Use-case+Report> Please review and comment on the report. It's in a good draft state and Next steps: After Eve and Nancy take a last pass we will export and a PDF and put it live on our Wiki to be circulated for feedback at VIVE/HIMSS Monday Mar 7: final WG draft ready, Alec will email the voting members to give them notice Thursday Mar 10th: need quorum to have a vote UMA and Other Standards (UDAP, etc) This sheets starts to organize the comparison https://docs.google.com/spreadsheets/d/1UWxhLoLFsVNmHulGvyS_3vx5hF9u2reFXT3… Nancy has a nice UMA use-case here: https://www.smilecdr.com/interoperability-patient-story Potential Future Work Items / Meeting Topics - UMA vs (OAuth, OIDC, GNAP, UDAP, ....) - compare protocols & features (eg a product comparison type matrix with [image: (tick)] and [image: (error)] 's) - Confluence clean up, archive old items and promote the latest & greatest - Review of the email-poc correlated authorization specification - A financial use-case report (following the Julie healthcare template) - either open banking or pensions dashboard - openbanking is to FHIR(data model) as FAPI is to SMARTonFHIR(authZ protocol profile) Upcoming Conferences - https://www.viveevent.com/ MARCH 6 - 9, 2022 - A *new* health IT conference | The CIO part of HIMSS - https://www.himss.org/ March 14 -18 | Orlando, FL & Digital - Internet Identity Workshop <https://internetidentityworkshop.com/> 34 is April 26-28 | Mountain View, CA - Identity North Spring Workshop - European Identity Conference <https://www.kuppingercole.com/events/eic2022> May 10-13, 2022 | Berlin - https://identiverse.com/ June 21-24, 2022 Denver, Colorado AOB Attendees As of October 26, 2020, quorum <http://kantarainitiative.org/confluence/display/uma/Participant+Roster> is 5 of 9. (Michael, Domenico, Peter, Sal, Thomas, Andi, Alec, Eve, Steve) Voting: 1. Eve 2. Steve 3. Alec 4. Domenico Non-voting participants: 1. Tim 2. Nancy 3. Scott Regrets:

1 0

Agenda for UMA telecon 2022-03-03
by Alec Laws 02 Mar '22

02 Mar '22

1 0