- WG-UMA - mailman.kantarainitiative.org

Mission-bashing in advance of the legal subgroup meeting this Friday
by Eve Maler 04 Aug '15

04 Aug '15

As mentioned on the last call, we’ve completed the planning for a sort of "next-gen" legal subgroup meeting series. The regular weekly meeting time starts this Friday, August 7, at 8-9am PT (check the UMA calendar <http://kantarainitiative.org/confluence/display/uma/Calendar> for your local listings, and let me know if you haven’t been added to the invite but would like to be). Dazza made a great suggestion to me offline. Now that the newly interested legal UMAnitarians have all gotten signed up and subscribed to this list*, it would be ideal to get ahead of the curve and use email to start discussing the draft mission statement that I sent out as part of the planning process, to try and get consensus on a final mission, scope out what can be achieved in the 2015 timeframe, and maybe paint a sample picture of what you think a (tiny) portion of the result might look like (without ratholing on actual arguments and solutions for now!). Based on our brief July 16 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-16> WG discussion, I came up with this draft: Develop recommendations about resource owner-and-requesting party [Alice-and-Bob], resource server-and-authorization server [service-and-hub], and any other transactional relationships in the UMA environment, keeping in mind international jurisdictional friendliness; applicability to many different vertical and horizontal use cases, including health; and support of higher-level access federation trust frameworks and similar efforts. With no surrounding context from our May-July WG discussions, it may not make all that much sense, so that’s one bug. Useful context might include: Generalizing away from the current Binding Obs approach somehow, while ensuring the result helps those who want to build access federation trust frameworks Considering how various tools in a lawyer’s toolbox might impact and be impacted by UMA’s native structure, such as “transactions”, consent”, license”, contract”, and even “data protection” and “privacy” Tom S in the past pointed us to UETA <http://www.uniformlaws.org/shared/docs/electronic%20transactions/ueta_final…>, which we then referenced in the current Binding Obs draft (the link is old and broken, however) Tim R has mentioned the UCITA law <http://www.uniformlaws.org/Act.aspx?title=Computer%20Information%20Transact…> to me as being evocative Taking a use-case-oriented approach rather than necessarily solving for All The Parties, e.g.: We first discussed Alice-and-Bob use cases on May 28 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-05-28>, with Kantara Consent Receipt liaison implications Adrian brought the service-and-hub use case to the table to achieve particular “liability shift” goals in a patient-centric health setting Clear as mud? :-) I hope this gives a feel for the “pain” and the opportunity. Thanks, everyone. Eve *Note: The intent is to conduct all subgroup work on this list so that it’s archived, there’s no question about who has seen what, and everyone can follow along. Our list gets little enough traffic that I hope this won’t be a problem for anyone. Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

Our distinguished vice-chair
by Eve Maler 03 Aug '15

03 Aug '15

I meant to highlight this in one of our calls — though it did make it to the Kantara blog... Our esteemed colleague and vice-chair, Dr. Maciej Machulak, is also the recent recipient of a very cool award from the MIT Technology Review: Innovators Under 35 Poland! http://www.innovatorsunder35.com/innovators-under-35-poland (Notice how he snuck the UMA logo in there? :-) Read more here: http://www.innovatorsunder35.com/innovator/maciej-machulak And check out these videos: https://www.youtube.com/watch?v=hZK1kbOj6Q4 https://www.youtube.com/watch?v=r7cirEdFfZg We’re proud to know and work with you! Eve Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

Reminder: APAC-friendly UMA WG sync 2015-08-06
by Eve Maler 03 Aug '15

03 Aug '15

Skype +99051000000481, access code 178-2540# See the UMA calendar <http://kantarainitiative.org/confluence/display/uma/Calendar> for additional dial-in details and non-APAC-friendly date and time equivalents (e.g., in the Pacific time zone the call will be held on 2015-08-05). If you wish to be added to the calendar invitation, send a private message to me. The standing agenda is to review recent WG progress, collect participant feedback, check on action item status, and attend to any other relevant business. Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

W3C work-in-progress on ID credentials enables decentralized solutions
by Adrian Gropper 03 Aug '15

03 Aug '15

http://opencreds.org/specs/source/identity-credentials/#introduction Adrian

2 1

Results of issue nominations - still some preparation for us to do before next week
by Eve Maler 31 Jul '15

31 Jul '15

Thanks to everyone for a very productive issue nomination session. I’ve done a bit of consolidation in the spreadsheet <https://docs.google.com/spreadsheets/d/1s27E3JsHdvl_UzhGkQ8ZWP2dnyAXQAj5sxE…> that we were working on, and labeled the issues in GitHub <https://github.com/xmlgrrl/UMA-Specifications/issues> with “blocking”, “critical”, and “editorial” labels, and put everything we discussed under a “V1.0.1” milestone for now — we’ll see if we get to them all. I didn’t label the issues with the impact or breaking/non-breaking nature, because these are qualitative assessments that are mostly useful for prioritizing the order in which should tackle the issues. But I did use them to derive an order of attack (which was kind of fun to do…). I haven’t yet put assignments in GitHub, and therein lies the rub: We don’t yet have official champions on several key issues. Here’s a screenshot of the relevant snippet to give you an idea of what we’re up against. In order for us to fully discuss (and resolve??) issues 165, 153, 154, and possibly 160 on August 7, would the champion be Justin since he’s the one most wanting to change the status quo? (As agreed earlier, we don’t need to see perfect full spec text, but I think we’re ready to consider fairly mature proposals; we’ve gotten our heads around alternative options.) [a bit more below] (As an aside, for Maciej, I’m not sure if we’ll manage to transfer the repo to Kantara before we manage to get through this patch release, and I wonder if we should even try. I’d hate to lose the issue metadata, especially what I just put in. :-) Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

Draft minutes of UMA telecon 2015-07-30 (next meeting starts earlier and is 90 minutes)
by Eve Maler 30 Jul '15

30 Jul '15

http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-30 Minutes Roll call Quorum was reached. Minutes approval MOTION: Andi moves: Approve the minutes of UMA telecon 2015-07-23 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-23>. APPROVED by unanimous consent. Legal subgroup update The subgroup has formed! Weekly meetings throughout 2015 will be held Fridays at 8am PT. All are free to join. The informal mass noun is an "argument of lawyers" but officially it's a "galaxy of lawyers". A "dispute of lawyers"? Spec versioning process Maciej is working with Oliver on the process. Issue nominations for patch release V1.0.1 Issues on GitHub <https://github.com/xmlgrrl/UMA-Specifications/issues> (Rough) guidelines <https://docs.google.com/document/d/1c50top8X6Aqw3CEVeX_SD2THqO508ihs14QwLem…> for acceptance We worked on issue nominations in this spreadsheet <https://docs.google.com/spreadsheets/d/1s27E3JsHdvl_UzhGkQ8ZWP2dnyAXQAj5sxE…> and came to consensus on which issues to are potentially blocking and critical (and thus need to be given first priority), and which are low-impact (and thus need to be given second priority), and which we suspect are non-breaking. All others are to be given last priority, if we have time. For any issues without champions that need them, we should seek champions for issues in this order. Already-identified champions should prepare options, discussion points, or proposed solutions as warranted for the next calls in priority order. AI status AI: Thomas: Review the charter for potential revisions in this annual cycle. AI: Eve: Review Marcelo Wikipedia comments and take next actions. DONE; a colleague is helping out with making edits. AI: Sal: Investigate IP implications of formal liaison activities with other Kantara groups with the LC, and ultimately draft an LC Note as warranted. AI: Gil: Edit the UIG to add Ishan's content and excerpt it for Eve to add to the FAQ, pointing everyone to the UIG. AI: Sal: Fill out IDESG form to have UMA adopted as a recommended standard for use in the IDESG framework. AI: Mike: Write SCIM protection case study to highlight client claims-based use case. AI: Eve: Update GitHub. DONE; Maciej helped finish this one. AI: Maciej: Write as many sections for the UIG as he can. AI: Justin: Write a UIG section on default-deny and race conditions. Attendees As of 30 Jul 2015 (pre-meeting), quorum is 7 of 12. (François, Domenico, Sal, Thomas, Andi, Phani, Robert, Maciej, Eve, Arlene, Irwin, Mike) Eve Domenico Irwin "Varma" - from NL - something of an IAM "outsider" - working on an idea for identity services focusing on privacy and business needs, called JanusID - working with ForgeRock - UMA fits perfectly with JanusID concept Andi Arlene Robert Sal Maciej Mike Non-voting participants: Sarah Justin George James Phillpotts - senior engineer in ForgeRock - works on OpenAM - working on UMA AS Jin Adrian Scott Dazza Colin Regrets: Thomas Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

Agenda for UMA telecon 2015-07-30 (please be prepared with issue nominations)
by Eve Maler 29 Jul '15

29 Jul '15

http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-30 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-30> Date and Time Thu Jul 30 9-10am PT Voice: Skype: +99051000000481 or US +1-805-309-2350 (international dial-in lines <https://www.turbobridge.com/join.html>), room code 178-2540# Screen sharing: http://join.me/findthomas <http://join.me/findthomas> - NOTE: IGNORE the join.me dial-in line shown in favor of the dial-in info above (Kantara "line C" and the Skype line) UMA calendar: http://kantarainitiative.org/confluence/display/uma/Calendar <http://kantarainitiative.org/confluence/display/uma/Calendar> Agenda Roll call Minutes approval Sample motion: Approve the minutes of UMA telecon 2015-07-23 <http://kantarainitiative.org/confluence/display/uma/UMA+telecon+2015-07-23>. Quick hits: Legal subgroup update Spec versioning process Issue nominations for patch release V1.0.1 Issues on GitHub <https://github.com/xmlgrrl/UMA-Specifications/issues> (Rough) guidelines <https://docs.google.com/document/d/1c50top8X6Aqw3CEVeX_SD2THqO508ihs14QwLem…> for acceptance AOB Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

New UMA Dev WG
by Eve Maler 28 Jul '15

28 Jul '15

The wiki for the new UMA Developer Resources WG is live (don’t miss Maciej’s artwork on the home page :-): http://kantarainitiative.org/confluence/display/umadev/Home If you’re interested to join, I hope you’ll take the opportunity! Eve Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0

Introduction
by James Phillpotts 24 Jul '15

24 Jul '15

Hi all, I've just joined the UMA working group, so allow me to introduce myself. I'm a senior engineer at ForgeRock, based in Bristol in the UK. I'm the principal engineer responsible for the UMA implementation in our OpenAM product, which will be providing capabilities as an UMA AS in our next release. I hope to be able to join a few of the weekly calls, and look forward to getting to know everyone over the next few months. Cheers James Phillpotts

1 0

Calendar disruption should be just about done now
by Eve Maler 23 Jul '15

23 Jul '15

http://kantarainitiative.org/confluence/display/uma/Calendar If you didn’t get calendar invitations that you were expecting, let me know. If you’re a non-voting participant and you’d like to be added to the invites, send me private mail and I’ll add you (I now try to add new voting participants to the invites as a matter of course). I made the fresh calendar entries repeat just through the end of 2015 because I believe Google Calendar is sort of buggy when it comes to repeating entries that go “forever”. I also created fortnightly entries (thanks, Robert, for explaining British usage to me :-p ), starting on August 5/6, for all the APAC participants I’m aware of. I only invited "APAC-type people" to them. If I missed you and you’re located in a region for which those meetings are the only good ones for you, or you’re interested to have even *more* UMA meetings in your life, let me know and I can invite you too. Eve Eve Maler | cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl | Calendar: xmlgrrl(a)gmail.com

1 0