January 2023 - WG-UMA - mailman.kantarainitiative.org

Draft notes from UMA 2021/01/26
by Alec L 30 Jan '23

30 Jan '23

https://kantara.atlassian.net/wiki/spaces/uma/pages/140607489/UMA+telecon+2… Agenda - Approve minutes since UMA telecon 2023-01-12 <https://kantara.atlassian.net/wiki/spaces/uma/pages/134512641> - Julie Use-case, move from draft to v1 - IDPro knowledge base / general UMA articles - discuss updates - Pensions Dashboard Use-case report - AOB Attendees - NOTE: As of Sept 15, 2022, quorum <http://kantarainitiative.org/confluence/display/uma/Participant+Roster> is 4 of 6. (Peter, Sal, Alec, Eve, Steve, Sophia) - Voting: - Peter - Alec - Sal - Non-voting participants: - Hanfei - Regrets: - Steve Quorum: No Meeting Minutes Approve previous meeting minutes - Approve minutes of UMA telecon 2023-01-12 <https://kantara.atlassian.net/wiki/spaces/uma/pages/134512641> UMA telecon 2023-01-19 <https://kantara.atlassian.net/wiki/spaces/uma/pages/137462845> - Deferred - no quorum TopicsJulie Use-case, move from draft to v1 Alec’s going to publish a v1 and upload the PDF to our confluence page Pensions Dashboard / Open Banking Use-case report, initial discussion Draft will be worked on here: Pension Dashboard Use-Case Report <https://kantara.atlassian.net/wiki/spaces/uma/pages/135659525> UK Pensions is separate from openbanking in general, however, it’s in the same financial vertical and shows a real UMA application IDPro knowledge base / general UMA articles AOB How could an app be an RS or AS, universal links starts to help with this issue however there are other considerations e.g. the client requests must originate from the same device/browser, otherwise, it’s routed to the single backend server and not the user’s installed app Could we profile or create an IG around using notice & consent receipts with an UMA AS, e.g. to present terms and purposes to be accepted by the RqP/RO. This comes back to having a defined language for policy vs leaving it open to the AS https://transparencylab.ca/ is hosting a workshop tomorrow (Jan 27) about transparency performance indicators and how they can be related to a controller credential, something that people make

1 0

Test
by Alec Laws 30 Jan '23

30 Jan '23

Please ignore

1 0

Agenda for UMA telecon 2023-01-26
by Alec L 25 Jan '23

25 Jan '23

https://kantara.atlassian.net/wiki/spaces/uma/pages/140607489/UMA+telecon+2… UMA telecon 2023-01-26Date and Time - Primary-week Thursdays 06:30am PT; Secondary-week Thursdays 10:00am PT - Screenshare and dial-in: https://zoom.us/j/99487814311?pwd=dTAvZi9uN0ZmeXJReWRrc1Zycm5KZz09 - United States: +1 346 248 7799, Access Code: 994 8781 4311 - See UMA calendar for additional details: https://kantara.atlassian.net/wiki/spaces/uma/pages/4857518/Calendar <https://kantara.atlassian.net/wiki/spaces/uma/pages/4857518> Agenda - Approve minutes since UMA telecon 2023-01-12 <https://kantara.atlassian.net/wiki/spaces/uma/pages/134512641> - Julie Use-case, move from draft to v1 - IDPro knowledge base / general UMA articles - discuss updates - Pensions Dashboard Use-case report - AOB

1 0

Agenda for UMA telecon 2023-01-19
by Alec L 18 Jan '23

18 Jan '23

https://kantara.atlassian.net/wiki/spaces/uma/pages/137462845/UMA+telecon+2… UMA telecon 2023-01-19Date and Time - Primary-week Thursdays 06:30am PT; Secondary-week Thursdays 10:00am PT - Screenshare and dial-in: https://zoom.us/j/99487814311?pwd=dTAvZi9uN0ZmeXJReWRrc1Zycm5KZz09 - United States: +1 346 248 7799, Access Code: 994 8781 4311 - See UMA calendar for additional details: https://kantara.atlassian.net/wiki/spaces/uma/pages/4857518/Calendar <https://kantara.atlassian.net/wiki/spaces/uma/pages/4857518> Agenda - Approve minutes since UMA telecon 2023-01-12 <https://kantara.atlassian.net/wiki/spaces/uma/pages/134512641> - Pensions Dashboard Use-case report - IDPro knowledge base / general UMA articles - AOB

1 0

Draft minutes of UMA telecon 2023-01-12
by Alec L 12 Jan '23

12 Jan '23

https://kantara.atlassian.net/wiki/spaces/uma/pages/134512641/UMA+telecon+2… Agenda - Approve minutes since UMA telecon 2022-06-30 <https://kantara.atlassian.net/wiki/spaces/uma/pages/14352423> - Pensions Dashboard / Open Banking Use-case report, initial discussion - Leadership elections - AOB Attendees - NOTE: As of Sept 15, 2022, quorum <http://kantarainitiative.org/confluence/display/uma/Participant+Roster> is 3 of 5. (Peter, Sal, Alec, Eve, Steve) - Voting: - Alec - Sal - Steve - Non-voting participants: - Hanfei - Regrets: - Quorum: Yes Meeting Minutes Approve previous meeting minutes - Approve minutes of UMA telecon 2022-08-11 <https://kantara.atlassian.net/wiki/spaces/uma/pages/39124993>, UMA telecon 2022-08-25 <https://kantara.atlassian.net/wiki/spaces/uma/pages/45875201>, UMA telecon 2022-09-08 <https://kantara.atlassian.net/wiki/spaces/uma/pages/56459265> , UMA telecon 2022-09-15 <https://kantara.atlassian.net/wiki/spaces/uma/pages/62029825> , UMA telecon 2022-09-22 <https://kantara.atlassian.net/wiki/spaces/uma/pages/62980097> , UMA telecon 2022-09-29 <https://kantara.atlassian.net/wiki/spaces/uma/pages/74055681> , UMA telecon 2022-10-06 <https://kantara.atlassian.net/wiki/spaces/uma/pages/79101953> , UMA telecon 2022-10-13 <https://kantara.atlassian.net/wiki/spaces/uma/pages/85721089> , UMA telecon 2022-10-20 <https://kantara.atlassian.net/wiki/spaces/uma/pages/91193345> , UMA telecon 2022-10-27 <https://kantara.atlassian.net/wiki/spaces/uma/pages/97353729> , UMA telecon 2022-11-03 <https://kantara.atlassian.net/wiki/spaces/uma/pages/107544577> , UMA telecon 2022-11-10 <https://kantara.atlassian.net/wiki/spaces/uma/pages/110166017> , UMA telecon 2022-11-24 <https://kantara.atlassian.net/wiki/spaces/uma/pages/115638273> , UMA telecon 2022-12-01 <https://kantara.atlassian.net/wiki/spaces/uma/pages/118784001> , UMA telecon 2022-12-08 <https://kantara.atlassian.net/wiki/spaces/uma/pages/119406593> , UMA telecon 2022-12-15 <https://kantara.atlassian.net/wiki/spaces/uma/pages/124715072> , UMA telecon 2023-01-05 <https://kantara.atlassian.net/wiki/spaces/uma/pages/130711553> - Alec moves to approve, Sal and Steve 2nd and 3rd it! Motion Passes!! Topics Pensions Dashboard / Open Banking Use-case report, initial discussion Draft will be worked on here: Pension Dashboard Use-Case Report <https://kantara.atlassian.net/wiki/spaces/uma/pages/135659525> Goals: - show UMA being used for a financial section use-case - UMA implementation and applications - UMA value add to this solution - keep it under 10 pages Audience? Technical or not? Let’s keep it general/accessible and then put technical information into the appendix Should we follow the TOC of Julie Adam’s use case? 1. Why Read This Report 2. Intro to use case and data-sharing implication/challenges that need to be addressed - individuals have a pension managed by each company they work for, companies have pension partners that manage it for them 3. The Nuts and BOLTS of Policy and How It Impacts Julie’s Journey – need to look into the UK landscape and what BOLTS are relevant here - sharing or PI during find, the finding of advisors - 4. Overview of the Pensions Dashboard solution + how it uses UMA - pension provider registration, dashboard registration, user and advisor identity - find pensions (not uma), pension registration (uma fedz), pension management + delegation (@the uma as), pension viewing (Uma grant) - not happy paths 5. UMA vs OAuth – what UMA enabled, why UMA - multiple RSs, federated RSs, delegation/RqP/resource-sharing, self-management of access policy, clients stay unaware of authorization/policy - it’s not OIDC or identity federation, it’s data access - without getting too technically deep! 6. Conclusion, extension to openbanking + other use cases, comparison to other places Appendix A: Kantara + pensions dashboards programme relationship (About This Report and the Standards Mentioned) Appendix B: References/ Bibliography Appendix C+: as needed if we want to get into tech/other details https://kantara.atlassian.net/wiki/spaces/uma/pages/134512641/UMA+telecon+2… Pension Dashboard/Viewer (many, B2C) *- Pension Authorization Service (1 operated by Gov?, G2C) 1-* Pension Providers (B2B, B2C) Alec will email the Pensions Dashboard folks to inform them of our intention. UMA leadership elections upcoming Sal nominates Alec to stay in the chair role. Sal nominates Steve to remain in the Vice-Chair role Hearing no objection. Passes by Acclamation! AOB - NIST 800-63 rev 4 draft is out: NIST Special Publication (SP) 800-63-4 (Draft), Digital Identity Guidelines <https://csrc.nist.gov/publications/detail/sp/800-63/4/draft> - Kantara + Better ID Coalition info session coming up on the Jan 24th - Will have it on our Agenda sometime in Feb, once we’ve had some time to read and digest

1 0

Agenda for UMA telecon 2023-01-12
by Alec L 11 Jan '23

11 Jan '23

https://kantara.atlassian.net/wiki/spaces/uma/pages/134512641/UMA+telecon+2… UMA telecon 2023-01-12Date and Time - Primary-week Thursdays 06:30am PT; Secondary-week Thursdays 10:00am PT - Screenshare and dial-in: https://zoom.us/j/99487814311?pwd=dTAvZi9uN0ZmeXJReWRrc1Zycm5KZz09 - United States: +1 346 248 7799, Access Code: 994 8781 4311 - See UMA calendar for additional details: https://kantara.atlassian.net/wiki/spaces/uma/pages/4857518/Calendar <https://kantara.atlassian.net/wiki/spaces/uma/pages/4857518> Agenda - Approve minutes since UMA telecon 2022-06-30 <https://kantara.atlassian.net/wiki/spaces/uma/pages/14352423> - Pensions Dashboard / Open Banking Use-case report, initial discussion - Leadership elections - AOB

1 0

Draft minutes for UMA telecon 2023-01-05
by Alec L 05 Jan '23

05 Jan '23

https://kantara.atlassian.net/wiki/spaces/uma/pages/130711553/UMA+telecon+2… UMA telecon 2023-01-05Date and Time - Primary-week Thursdays 06:30am PT; Secondary-week Thursdays 10:00am PT - Screenshare and dial-in: https://zoom.us/j/99487814311?pwd=dTAvZi9uN0ZmeXJReWRrc1Zycm5KZz09 - United States: +1 346 248 7799, Access Code: 994 8781 4311 - See UMA calendar for additional details: https://kantara.atlassian.net/wiki/spaces/uma/pages/4857518/Calendar <https://kantara.atlassian.net/wiki/spaces/uma/pages/4857518> Agenda - Approve minutes since UMA telecon 2022-06-30 <https://kantara.atlassian.net/wiki/spaces/uma/pages/14352423> - 2023 planning & discussion - Leadership elections - FAPI and UMA next steps. OAuth compatible UMA version - AOB Attendees - NOTE: As of Sept 15, 2022, quorum <http://kantarainitiative.org/confluence/display/uma/Participant+Roster> is 3 of 5. (Peter, Sal, Alec, Eve, Steve) - Voting: - Alec - Steve - Non-voting participants: - Hanfei - Scott - Domenico - Regrets: - Quorum: No Meeting Minutes Approve previous meeting minutes - Approve minutes of UMA telecon 2022-08-11 <https://kantara.atlassian.net/wiki/spaces/uma/pages/39124993>, UMA telecon 2022-08-25 <https://kantara.atlassian.net/wiki/spaces/uma/pages/45875201>, UMA telecon 2022-09-08 <https://kantara.atlassian.net/wiki/spaces/uma/pages/56459265> , UMA telecon 2022-09-15 <https://kantara.atlassian.net/wiki/spaces/uma/pages/62029825> , UMA telecon 2022-09-22 <https://kantara.atlassian.net/wiki/spaces/uma/pages/62980097> , UMA telecon 2022-09-29 <https://kantara.atlassian.net/wiki/spaces/uma/pages/74055681> , UMA telecon 2022-10-06 <https://kantara.atlassian.net/wiki/spaces/uma/pages/79101953> , UMA telecon 2022-10-13 <https://kantara.atlassian.net/wiki/spaces/uma/pages/85721089> , UMA telecon 2022-10-20 <https://kantara.atlassian.net/wiki/spaces/uma/pages/91193345> , UMA telecon 2022-10-27 <https://kantara.atlassian.net/wiki/spaces/uma/pages/97353729> , UMA telecon 2022-11-03 <https://kantara.atlassian.net/wiki/spaces/uma/pages/107544577> , UMA telecon 2022-11-10 <https://kantara.atlassian.net/wiki/spaces/uma/pages/110166017> , UMA telecon 2022-11-24 <https://kantara.atlassian.net/wiki/spaces/uma/pages/115638273> , UMA telecon 2022-12-01 <https://kantara.atlassian.net/wiki/spaces/uma/pages/118784001> , UMA telecon 2022-12-08 <https://kantara.atlassian.net/wiki/spaces/uma/pages/119406593> , UMA telecon 2022-12-15 <https://kantara.atlassian.net/wiki/spaces/uma/pages/124715072> - Deferred - no quorum Topics 2023 planning & discussion For identos, using UMA in healthcare (hospital and provincial). Looking for how to promote UMA within the US healthcare, how it fits within the sequoia/onc/carin/direct trust Health: direct trust federated identity gateway aligned with UMA requirements/spec. Healthcare + Finance, many consumers with data relationships. Desire to empower self-service vs staff managed sharing + access. UMA + FAPI, still believes UMA works with FAPI, however, making UMA directly compatible with OAuth/OIDC makes this trivial/obvious. Consumer in the driver's seat → bring your own app. How do trust registry and BYOA concepts work together? eg UDAP requires clients to have attestation What about Verifiable Credentials? starting to feel an inflection point eIDAS, user-carried credentials able to be presented? New regulation may lead to FAPI/VC requirements mDL, showed VC alignment for web presentation using the openid4vc. Not clear how UMA works with mDL Can we get an update from UK Pensions Dashboard? Tentative 2023 roadmap: - 120 A financial use-case report (following the Julie healthcare template) - openbanking is to FHIR(data model) as FAPI is to SMARTonFHIR(authZ protocol profile) - 123 Pensions Dasboard Report → use-case is well understood and live/going live soon. tight use-case - *Let’s reach out to some of the involved people eg at Origo or Forgerock. Were there any gaps in UMA they had to work around?* - https://www.pensionsdashboardsprogramme.org.uk/wp-content/uploads/2022/11/P… - 127 Open Banking Report → requires more research, determine use case - *Who would lead this/ needs this for UMA in open banking contexts? Should come after FAPI review?* - *130 IDPro knowledge base articles* - 140 Wikipedia article refresh

1 0

Agenda for UMA telecon 2023-01-05
by Alec L 04 Jan '23

04 Jan '23

Happy New Year! Our first call of the year is tomorrow at 930ET/630PT Best, - Alec https://kantara.atlassian.net/wiki/spaces/uma/pages/130711553/UMA+telecon+2… Date and Time - Primary-week Thursdays 06:30am PT; Secondary-week Thursdays 10:00am PT - Screenshare and dial-in: https://zoom.us/j/99487814311?pwd=dTAvZi9uN0ZmeXJReWRrc1Zycm5KZz09 - United States: +1 346 248 7799, Access Code: 994 8781 4311 - See UMA calendar for additional details: https://kantara.atlassian.net/wiki/spaces/uma/pages/4857518/Calendar <https://kantara.atlassian.net/wiki/spaces/uma/pages/4857518> Agenda - Approve minutes since UMA telecon 2022-06-30 <https://kantara.atlassian.net/wiki/spaces/uma/pages/14352423> - 2023 planning & discussion - Leadership elections - FAPI and UMA next steps. OAuth compatible UMA version - AOB

1 0