Conference Call Agenda, September 16, 2003

1. Accept minutes from SAML 
2.0 F2F 

------------------------------------------------

http://lists.oasis-open.org/archives/security-services/200309/msg00057.html

 

2. Review Time-Line for 
SAML 2.0

----------------------------------------------

 

September, 30, 2003 -- Work 
item list for SAML 2.0 closes

October 14, 
2003         -- Complete use-case 
or candidate solutions for all 

                                       accepted 
work items

 

October 22-24, 
2003    -- Proposed F2F on West Coast

 

April 2, 
2004                
-- Enter last call on SSTC (final step before 

                                      
committee draft)

 

3. Fix SAML 2.0 goal 
statement typo (need vote)

---------------------------------------------

http://lists.oasis-open.org/archives/security-services/200309/msg00054.html

 

The goals of the SAML 2.0 effort include:

o Addressing issues and enhancement requests that have 
arisen from

experience with real-world SAML implementations and with 
standards

architectures that use SAML, such as the OASIS WSS and XACML 
work.

o Adding support for features that were deferred from 
previous

versions of SAML for schedule reasons, such as session 
support, the

exchange of metadata to ensure more interoperable 
interactions, and

collection of credentials.

o Converging on a 
unified technology approach for identity federation by 

integrating the specifications contributed to the TC by the 
Liberty 

Alliance.

 

 

 

4. Proposed demo at XML 
2003

-----------------------------------------

 

- Proposal from SUN posted 
to the list 

  (SUN contact person 
is included)

 

- WSS SAML Token Profile 
InterOp 

(need someone to take 
ownership and drive forward)

 

5. Post photos from F2F on 
web site?

------------------------------------------------

 

 

6. Open Action 
Items

---------------------------

 

http://www.oasis-open.org/apps/org/workgroup/security/members/action_items.php

 

  
  

    #0074: Create SAML 2.0 issues list

  

    Owner: Eve Maler

  

    Status: Open

  

    Assigned: 16 Sep 2003

  

    Due: ---

  

    Comments:

  

    
      
      

  

    #0073: Extract enhancement requests from 
      current issues list

  

    Owner: Eve Maler

  

    Status: Open

  

    Assigned: 16 Sep 2003

  

    Due: ---

  

    Comments:

  

    
      
      

  

    #0072: Authentication Context

  

    Owner: Jeff Hodges

  

    Status: Open

  

    Assigned: 16 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-16 
      12:11 GMT
Main task is to approrpiately move Liberty AuthContext 
      specification into OASIS (so it becomes a standard). 

Jeff will 
      ping Paul Madsen to see if he is interested.

  

    
      
      

  

    #0071: Enhanced Client Profiles

  

    Owner: Frederick Hirsch

  

    Status: Open

  

    Assigned: 16 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-16 
      12:06 GMT
Use-case discussed at F2F. Awaiting candidate solution.

  

    
      
      

  

    #0070: SASL support

  

    Owner: Bob Morgan

  

    Status: Open

  

    Assigned: 16 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-16 
      12:04 GMT
Active work item -- waiting solution 
      proposal.

Defining SAML as a SASL security mechanism.

  

    
      
      

  

    #0069: Baseline Attribute Namespaces

  

    Owner: Bob Morgan

  

    Status: Open

  

    Assigned: 16 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-16 
      12:01 GMT
Use-case discussed at F2F and generally supported. Waiting 
      for solution proposal.

For example, a DSML or X.500 profile for a 
      person's attributes expressed in SAML.

  

    
      
      

  

    #0068: Delegation and Intermediaries

  

    Owner: Bob Morgan

  

    Status: Open

  

    Assigned: 16 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-16 
      11:58 GMT
Delegation and Intermediaries
Use cases that support 
      arbitrary multi-hop delegation. Liberty WSF supports one-hop 
      impersonation. The relationship of this to WSS needs to be sorted out. 
      This relates to the Fidelity need for a WSRP profile. This is related to 
      W-11. The item "multi-participant transactional workflows" was folded into 
      this one.

Prateek Mishra 2003-09-16 11:59 GMT

WAITING for 
      Use-Case proposal.

  

    
      
      

  

    #0067: Identity Federation

  

    Owner: Scott Cantor

  

    Status: Open

  

    Assigned: 16 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-16 
      11:53 GMT
Active work item - Waiting for solution proposal
Will 
      appropriately expand to cover use-cases beyond liberty. Discussion of 
      solution proposal is moving forward between Scott Cantor and John 
  Linn.

  

    
      
      

  

    #0066: SSO Profile Enhancements

  

    Owner: Prateek Mishra

  

    Status: Open

  

    Assigned: 16 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-16 
      11:50 GMT
Moved to Active work item after F2F discussion and 
      presentation of use-case. Candidate solution should reference both Liberty 
      and SAML 1.1 draft. Need to conduct survey of "typical" data items transf. 
      from SP to IdP.

  

    
      
      

  

    #0065: Credentials Collector

  

    Owner: Jeff Hodges

  

    Status: Open

  

    Assigned: 16 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-16 
      11:46 GMT
Waiting on use-case proposal.

  

    
      
      

  

    #0064: Metadata and Exchange 
Protocol

  

    Owner: Jahan Moreh

  

    Status: Open

  

    Assigned: 15 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-15 
      20:05 GMT
Means of publishing and communicating meta-data. Waiting on a 
      solution proposal.

  

    
      
      

  

    #0063: Profile Enhancements for 
  Metadata

  

    Owner: Jahan Moreh

  

    Status: Open

  

    Assigned: 15 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-15 
      20:07 GMT
Waiting on a solution proposal.

  

    
      
      

  

    #0062: SSO with Attribute Exchange

  

    Owner: Prateek Mishra

  

    Status: Open

  

    Assigned: 15 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-15 
      19:49 GMT
High level use-case was presented at the F2F. Next steps are 
      to specify the use-case in detail.

  

    
      
      

  

    #0061: Kerberos Use Cases for SAML 
  2.0

  

    Owner: John Hughes

  

    Status: Open

  

    Assigned: 15 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-15 
      19:41 GMT
John presented some Kerberos-SAML use-cases at the F2F. Next 
      steps are to revise the materials and respond to comments. Meeting minutes 
      describe the following next steps: (1) write up presentation to drill down 
      details (2) also rollup to ensure that business needs are met.

  

    
      
      

  

    #0060: Publish pointer to SAML 1.0 Session 
      Materials

  

    Owner: Hal Lockhart

  

    Status: Open

  

    Assigned: 15 Sep 2003

  

    Due: ---

  

    Comments:

  

    
      
      

  

    #0059: Session Support

  

    Owner: John Kemp

  

    Status: Open

  

    Assigned: 15 Sep 2003

  

    Due: ---

  

    Comments:
Prateek Mishra 2003-09-15 
      19:33 GMT
Use case document was presented at the Sep 2003 F2F and will 
      be revised based on comments given there. Once that is complete, a gap 
      analysis between the use cases and available material in Liberty is 
      required. That will be followed by a solution proposal.

  

    
      
      

  

    #0055: Draft goal statement for SAML 
  2.0

  

    Owner: Jeff Hodges

  

    Status: Open

  

    Assigned: 24 Jul 2003

  

    Due: ---

  

    Comments:
Rob Philpott 2003-07-25 02:53 
      GMT
Action item from 22-July con-call

 

 

 

 

                                      

 

 

----------------------

Prateek Mishra

Netegrity

Director, Technology and Architecture

p: 781-530-6564

c: 617-875-4970