- WG-UMA - mailman.kantarainitiative.org

Business model telecon notes for 2019-05-07
by Eve Maler 10 May '19

10 May '19

They can be found here: https://kantarainitiative.org/confluence/display/uma/UMA+legal+subgroup+not… *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

8 15

Call for agenda items for tomorrow - or cancel
by Eve Maler 08 May '19

08 May '19

It seems like the business model work is hitting on all cylinders, but unless we have somebody (Pedro? Alec?) contributing a concrete extension before tomorrow, I suggest we cancel. Many of us are preparing for EIC in Munich. There is no meeting next week, but we can try and have an UMA BOF alongside the Kantara plenary or workshop! (Lots happened last week; IIW 28 session notes are starting to appear <https://iiw.idcommons.net/IIW_28_Session_Notes>...) *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 1

Reminder: New business model telecon series starts tomorrow
by Eve Maler 06 May '19

06 May '19

We're meeting 8am PT at the usual GoToMeeting link we use for Thursday telecons (https://global.gotomeeting.com/join/857787301) If you weren't yet added to the calendar invitation but want to be, let me know. Standing agenda: work on producing our second business model report by September, initially focusing the work on use cases that illustrate each of our mappings from business relationships (and changes in those relationships) to UMA technical artifacts. *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Looking for quick review of "UMA 101" slides for IIW first day
by Eve Maler 28 Apr '19

28 Apr '19

Hi folks-- I put together some slides to present at IIW for a requested UMA 101 session, which I have shamelessly based on UMA overview/deep dive material presented at last week's HEART webinar. I'm considering this sort of a "version 2" of the material that Maciej and I delivered to the IETF 104 meeting; it was a welcome chance to refactor it. If you have a chance to look at it quickly and comment on it by Monday afternoon Pacific time, that would be great. I'll upload the final version to our wiki and advertise it in the usual fashion. Thanks in advance! *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

The UMA business model meeting series is set up
by Eve Maler 21 Apr '19

21 Apr '19

http://kantarainitiative.org/calendars/ It starts on May 7th. We're working towards a September completion of the work, with drafts available before that. If you haven't yet been added directly to the event invitation and you want to be, please let me know. *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Draft minutes of UMA telecon 2019-04-18
by Eve Maler 18 Apr '19

18 Apr '19

https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-04-18 MinutesRoll call Quorum was not reached. Approve minutes - - Approve minutes of UMA telecon 2019-03-14 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-03-14> , 2019-03-28 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-03-28> , 2019-04-04 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-04-04> Deferred. Goings-on in the community On Apr 4, the last time we met, the UK government put out its response <https://assets.publishing.service.gov.uk/government/uploads/system/uploads/…> to the consultation it had done on the Pensions Dashboard project. Based on the acknowledgment there that UMA is required for PD success, there is an opportunity now to align UMA, OB, FAPI, PD, CIBA, OAuth, etc. – and some interested parties are currently applying resources to help do this. Don't forget about: - The HEART webinar and deep-dive workshop <https://zoom.us/meeting/register/0488db6a4250eeea7c24e00bf0acd2b8> (two hours total) on Apr 23 - The IEEE ComSoc magazine special issue <https://www.comsoc.org/publications/magazines/ieee-communications-standards…> with deadline of mid-June – "The Dawn of the Internet Identity Layer and the Role of Decentralized Identity" (Eve is one of the guest editors) - The SOUPS conference <https://www.usenix.org/conference/soups2019> – the call for posters is still open and the new PEPR conference is co-located with it (@@add link) - The new Me2B alliance <http://www.me2b.us/> – Lisa is building this community as a home for developing a code of practice and certification for ethical digital relationships – they're starting with businesses but it could branch out - IIW – here is a M2Be discount code! Me2B_IIW28_20 IETF update Opinion is mixed in the OAuth group about adoption. Eve attended the last OAuth virtual office hours meeting and discussing things more with the WG. There's not, perhaps, a deep understanding yet of the many use cases, particularly around the A-to-B flows. Eve offered a "bull session" to get any and all questions answered at Montreal (IETF 105) in July, and there was good interest in that. Alec/Identos is planning to attend as well. Who else will be there who's on today call? We're not sure if anyone else. During that call, they brought up again that the specs could change considerably if adopted. Eve assured them that the UMA WG knows the deal, and she has exhorted the UMA participants to take active part where they are committed to current design; the key consideration overall is solving for the use cases that UMA has solved for (thinking, e.g., of slide 12 in what we presented). Should we consider breaking up our specs more and contribute them in more pieces? Mike had suggested something like that. Eve hadn't been sure of that, but maybe (e.g.) Alex notes contributing token endpoint error handling as an independent piece would be a kind of valuable primitive they could adopt. Cigdem asks: Do we have feedback on which parts they're excited about? Thomas notes no one gets excited about anything until you're at IETF draft. Maybe we do want to consider the informational RFC path at first, given that there is starting to be some adoption that could welcome that level of standardization. It's not hard to then turn it into a standards-track RFC. The former could be an individual submission (maler-*) or could be adopted by the OAuth WG (oauth-*) as a work item and select specific people to read it and comment on it. The individual route is faster. If the OAuth WG remains uninterested and the world continues to demonstrate traction, we could go to the ADs (Area Director, which in the case of OAuth is Security <https://trac.ietf.org/trac/sec/wiki>; the ADs are Benjamin Kaduk and EKR) and ask to adopt. Cigdem suggests the permission ticket notion might be another area that is amenable to modularizing somehow. It's a pattern we're seeing more frequently. It's a "ticket-getting-ticket" (TGT) that functions kind of like an authorization code, or at least that's the analogy that Bertrand made and that we tried to make in the IETF 104 presentation. Is this a dangerous analogy? Ben would get it! Hannes appears to believe that the WG needs a charter change before adopting the UMA work, but we're not certain why this is the case. Let's continue to keep things open prior to Montreal, and figure out our choice of strategy by/after then. *AI:* Eve: Check with Hannes/Rifaat about the OAuth charter situation prior to Montreal. Business model update There is a winning primary time: Tuesdays at 9am PT / 10am CT / 11am ET / 4pm UK. And a winning secondary or alternate time: Fridays at 8am PT / 9am CT / 10am ET / 3pm UK. *AI:* Eve: Set up the new business model meeting series, using the same UMA WG GTM where possible. *AI:* All: If you didn't respond to the Doodle poll for this meeting series, please drop Eve a note if you want to be included in the event invitation. Fine-grained access extension This is the name that Pedro has given his extension (already documented in Keycloak documentation, but he has turned it into something that looks like an extension spec). He has send a draft to Eve but not yet to the list, but it's coming soon! If there are enough UMAnitarians around in Montreal, we could potentially have an an UMA WG F2F there and take a look at an Identos-contributed extension spec (assuming it might be contributed by then). Charter refresh discussion - The current charter <https://kantarainitiative.org/confluence/display/uma/Charter> as of 27 Feb 2018 Deferred. Attendees As of 18 Oct 2018, quorum <https://kantarainitiative.org/confluence/display/uma/Participant+Roster> is 5 of 8. (Domenico, Peter, Sal, Andi, Maciej, Eve, Mike, Cigdem) 1. Domenico 2. Eve 3. Cigdem Non-voting participants: - Alec - Scott - Lisa - Thomas - Colin Regrets: - Andi *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Agenda for UMA telecon 2019-04-18
by Eve Maler 17 Apr '19

17 Apr '19

https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-04-18 Date and Time - *Thursdays 6am PT* - Screenshare and dial-in: https://global.gotomeeting.com/join/857787301 - See UMA calendar for additional details: http://kantarainitiative.org/confluence/display/uma/Calendar Agenda - Roll call - Approve minutes of UMA telecon 2019-03-14 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-03-14> , 2019-03-28 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-03-28> , 2019-04-04 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-04-04> - IETF update - Business model update - Fine-grained access extension - Charter refresh discussion - AOB *Eve Maler*Cell or Signal +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 0

Agenda for UMA telecon 2019-04-11
by Eve Maler 10 Apr '19

10 Apr '19

https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-04-11 Date and Time - *Thursdays 6am PT* - Screenshare and dial-in: https://global.gotomeeting.com/join/857787301 - See UMA calendar for additional details: http://kantarainitiative.org/confluence/display/uma/Calendar Agenda - Roll call - Approve minutes of UMA telecon 2019-03-14 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-03-14> , 2019-03-28 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-03-28> , 2019-04-04 <https://kantarainitiative.org/confluence/display/uma/UMA+telecon+2019-04-04> - IETF update - Business model update - Fine-grained access extension - Charter refresh discussion - AOB *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

1 1

Reinvigorating our business model work: a plan
by Eve Maler 10 Apr '19

10 Apr '19

Tim (our Legal Editor) and I have just met, and I'd like to propose a way forward for producing our second business model report. We'd like to: - Focus it on use cases that illustrate each of our mappings from business relationships (and changes in those relationships) to UMA technical artifacts -- we can refine as necessary - Publish it by September -- moving quickly is a priority - Find a time when interested parties can meet apart from the main Thursday WG flow -- like our old Legal meeting series As a reminder, here is the main "Legal role definitions <https://docs.google.com/presentation/d/1I12agEsfaJK3LEiJyROrJV3PCEmhlCzCxYS…>" deck. Please respond in this thread or directly to me and Tim with your interest and questions. *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl

5 11

Fwd: [Openid-specs-heart] ONC HEART webinar 2019 April 23 1:30 - 3:30 PM EST
by Eve Maler 04 Apr '19

04 Apr '19

FYI, folks -- please feel free to register, join, and spread the word. I'll be leading the UMA-specific portions of the webinar and online workshop. *Eve Maler*Cell +1 425.345.6756 | Skype: xmlgrrl | Twitter: @xmlgrrl ---------- Forwarded message --------- From: Debbie Bucci <debbucci(a)gmail.com> Date: Mon, Apr 1, 2019 at 6:04 AM Subject: [Openid-specs-heart] ONC HEART webinar 2019 April 23 1:30 - 3:30 PM EST To: <openid-specs-heart(a)lists.openid.net> Hello all, Please join us for recent HEART updates and spread the word *ONC’s HEART Profiles Webinar & Workshop – Registration Open* Join ONC for a HEART (Health Relationship Trust) Profiles Webinar and Workshop to learn about the recently updated HEART profiles and participate in a short, technical workshop about the HEART protocols and how they compare and contrast with other efforts. HEART <https://click.connect.hhs.gov/?qs=9bccb28cc91647c7447fb638ecb0e1a0f177c8e14…> is a set of profiles, created in partnership with the OpenID Foundation, that enables consumers to control how, when, and with whom their clinical data is shared. The HEART model builds on existing state-of-the-art security and adds additional components to ensure that patient clinical data is securely exchanged. *Date & Time*: April 23, 2019 at 1:30pm ET Register <https://click.connect.hhs.gov/?qs=9bccb28cc91647c7c1087da1288ea5348b9730cd8…> _______________________________________________ Openid-specs-heart mailing list Openid-specs-heart(a)lists.openid.net http://lists.openid.net/mailman/listinfo/openid-specs-heart

1 0