Next in thread →
Next in month →
RE: [security-services] Official SSTC Submission of SAML 2.0 for consideration as an OASIS Standard
Congratulations! I was watching all of the activity yesterday just waiting for the submission to post; I turned off my laptop around 6pm but was happy to see it waiting in my inbox this morning. At this point OASIS staff has until the end of the month to review the submission and make sure everything is in order; at a cursory glance this certainly looks to be the case. On February 1 I'll announce the pre-vote review (assuming no inconsistencies are discovered), with the ballot running from the 16th until the end of the month. On behalf of the entire OASIS staff thank you Rob and Prateek, and the entire TC, for your hard work and dedication! Regards, Mary Mary P McRae OASIS Manager of TC Administration email: web: www.oasis-open.org cell: 603.557.7985 voip: 603.232.9096 From: Philpott, Robert [mailto:] Sent: Saturday, January 15, 2005 10:27 PM To: Cc: prateek mishra; Philpott, Robert; Subject: [security-services] Official SSTC Submission of SAML 2.0 for consideration as an OASIS Standard (resent with a subject line this time so the Kavi mail list archiver will accept the message – ooops) Hello Mary, The SSTC has successfully completed a final public review of the SAML 2.0 specifications and subsequently completed a vote to reaffirm the specifications as SSTC Committee Draft Specifications. We also completed a vote to submit the specifications to OASIS for consideration of approval as an OASIS Standard. The current OASIS TC process identifies the following items that must be provided when submitting a TC Committee Draft to OASIS for consideration of adoption as an OASIS Standard. The SSTC is providing the information supplied below to satisfy the TC process in this regard. Please let Prateek and myself know if there are any questions or whether you require additional information to satisfy this request. Thank you. OASIS Security Services Technical Committee Chairs: Prateek Mishra Principal identity p: 617-969-5745 c: 617-872-7737 mailto: Rob Philpott RSA Security Inc. Tel: 781-515-7115 Mobile: 617-510-0893 RSA Security mailto: ------------------------------------------------------------------------------------ A formal specification that is a valid member of its type, together with appropriate documentation for the specification, both of which must be written using approved OASIS templates A consolidated zip file with all specifications and schema is publicly available from: http://www.oasis-open.org/committees/download.php/11045/sstc-saml-2.0-cd-04-pdf-xsd.zip The 8 individual SAML V2.0 PDF files (with no diff’s) are publicly available at: http://www.oasis-open.org/committees/download.php/11044/sstc-saml-conformance-2.0-cd-04.pdf http://www.oasis-open.org/committees/download.php/11042/sstc-saml-core-2.0-cd-04.pdf http://www.oasis-open.org/committees/download.php/11040/sstc-saml-bindings-2.0-cd-04.pdf http://www.oasis-open.org/committees/download.php/11038/sstc-saml-profiles-2.0-cd-04.pdf http://www.oasis-open.org/committees/download.php/11036/sstc-saml-metadata-2.0-cd-04.pdf http://www.oasis-open.org/committees/download.php/11047/sstc-saml-authn-context-2.0-cd-04.pdf http://www.oasis-open.org/committees/download.php/11031/sstc-saml-sec-consider-2.0-cd-04.pdf http://www.oasis-open.org/committees/download.php/11029/sstc-saml-glossary-2.0-cd-04.pdf The 7 individual main SAML V2.0 schema files are publicly available at: http://www.oasis-open.org/committees/download.php/11027/sstc-saml-schema-assertion-2.0.xsd http://www.oasis-open.org/committees/download.php/11026/sstc-saml-schema-protocol-2.0.xsd http://www.oasis-open.org/committees/download.php/11025/sstc-saml-schema-ecp-2.0.xsd http://www.oasis-open.org/committees/download.php/11024/sstc-saml-schema-metadata-2.0.xsd http://www.oasis-open.org/committees/download.php/11023/sstc-saml-schema-x500-2.0.xsd http://www.oasis-open.org/committees/download.php/11022/sstc-saml-schema-xacml-2.0.xsd http://www.oasis-open.org/committees/download.php/11021/sstc-saml-schema-dce-2.0.xsd The 2 individual core SAML V2.0 Authentication Context schema files are publicly available at: http://www.oasis-open.org/committees/download.php/11020/sstc-saml-schema-authn-context-2.0.xsd http://www.oasis-open.org/committees/download.php/11019/sstc-saml-schema-authn-context-types-2.0.xsd The 24 individual SAML V2.0-defined Authentication Context Class schema files are publicly available at: http://www.oasis-open.org/committees/download.php/11018/sstc-saml-schema-authn-context-auth-telephony-2.0.xsd http://www.oasis-open.org/committees/download.php/11017/sstc-saml-schema-authn-context-ip-2.0.xsd http://www.oasis-open.org/committees/download.php/11016/sstc-saml-schema-authn-context-ippword-2.0.xsd http://www.oasis-open.org/committees/download.php/11015/sstc-saml-schema-authn-context-kerberos-2.0.xsd http://www.oasis-open.org/committees/download.php/11014/sstc-saml-schema-authn-context-mobileonefactor-reg-2.0.xsd http://www.oasis-open.org/committees/download.php/11013/sstc-saml-schema-authn-context-mobileonefactor-unreg-2.0.xsd http://www.oasis-open.org/committees/download.php/11012/sstc-saml-schema-authn-context-mobiletwofactor-reg-2.0.xsd http://www.oasis-open.org/committees/download.php/11011/sstc-saml-schema-authn-context-mobiletwofactor-unreg-2.0.xsd http://www.oasis-open.org/committees/download.php/11010/sstc-saml-schema-authn-context-nomad-telephony-2.0.xsd http://www.oasis-open.org/committees/download.php/11009/sstc-saml-schema-authn-context-personal-telephony-2.0.xsd http://www.oasis-open.org/committees/download.php/11008/sstc-saml-schema-authn-context-pgp-2.0.xsd http://www.oasis-open.org/committees/download.php/11007/sstc-saml-schema-authn-context-ppt-2.0.xsd http://www.oasis-open.org/committees/download.php/11006/sstc-saml-schema-authn-context-pword-2.0.xsd http://www.oasis-open.org/committees/download.php/11005/sstc-saml-schema-authn-context-session-2.0.xsd http://www.oasis-open.org/committees/download.php/11004/sstc-saml-schema-authn-context-smartcard-2.0.xsd http://www.oasis-open.org/committees/download.php/11003/sstc-saml-schema-authn-context-smartcardpki-2.0.xsd http://www.oasis-open.org/committees/download.php/11002/sstc-saml-schema-authn-context-softwarepki-2.0.xsd http://www.oasis-open.org/committees/download.php/11001/sstc-saml-schema-authn-context-spki-2.0.xsd http://www.oasis-open.org/committees/download.php/11000/sstc-saml-schema-authn-context-srp-2.0.xsd http://www.oasis-open.org/committees/download.php/10999/sstc-saml-schema-authn-context-sslcert-2.0.xsd http://www.oasis-open.org/committees/download.php/10998/sstc-saml-schema-authn-context-telephony-2.0.xsd http://www.oasis-open.org/committees/download.php/10997/sstc-saml-schema-authn-context-timesync-2.0.xsd http://www.oasis-open.org/committees/download.php/10996/sstc-saml-schema-authn-context-x509-2.0.xsd http://www.oasis-open.org/committees/download.php/10995/sstc-saml-schema-authn-context-xmldsig-2.0.xsd A clear English-language summary of the specification: The Security Assertion Markup Language (SAML) defines the syntax and processing semantics of assertions made about a subject by a system entity. In the course of making, or relying upon such assertions, SAML system entities may use other protocols to communicate either regarding an assertion itself, or the subject of an assertion. This specification defines both the structure of SAML assertions, and an associated set of protocols, in addition to the processing rules involved in managing a SAML system. SAML assertions and protocol messages are encoded in XML and use XML namespaces. They are typically embedded in other structures for transport, such as HTTP POST requests or XML-encoded SOAP messages. The SAML bindings specification provides frameworks for the embedding and transport of SAML protocol messages. The SAML profiles specification provides a baseline set of profiles for the use of SAML assertions and protocols to accomplish specific use cases or achieve interoperability when using SAML features. A statement regarding the relationship of this specification to similar work of other OASIS TCs or other standards developing organizations: To our knowledge, this specification has no relationship to the work of other OASIS TCs or other standards developing organizations. Certification by at least three OASIS member organizations that they are successfully using the specification consistently with the OASIS IPR Policy: (a) Trustgenix attestation of successful use of SAML 2.0: · http://lists.oasis-open.org/archives/security-services/200412/msg00014.html (b) Entrust attestation of SAML 2.0 implementation: · http://lists.oasis-open.org/archives/security-services/200411/msg00042.html (c) Sun Microsystems attestation of successful use of SAML V2.0: · http://lists.oasis-open.org/archives/security-services/200411/msg00105.html An account of each of the comments/issues raised during the public review period, along with its resolution: Available from http://lists.oasis-open.org/archives/security-services/200501/msg00070.html An account of and results of the voting to approve the approve the specification as a Committee Draft: (a) Vote to affirm approval of the current specification set as a committee draft: · 34 Yes, 0 No, 0 Abstain (Out of 39). Two-thirds vote required for passage. · http://www.oasis-open.org/apps/org/workgroup/security/ballot.php?id=667& (b) Vote to submit current specification set to OASIS for standardization. · 33 Yes, 0 No, 0 Abstain (Out of 39). Simple majority required for passage. · http://www.oasis-open.org/apps/org/workgroup/security/ballot.php?id=668& An account of or pointer to votes and comments received in any earlier attempts to standardize substantially the same specification, together with the originating TC's response to each comment; This specification has not previously been submitted to OASIS for standardization. A pointer to the publicly visible comments archive for the originating TC; http://lists.oasis-open.org/archives/security-services-comment/ A statement from the chair of the TC certifying that all members of the TC have been provided with a copy of the OASIS IPR Policy: Notice published to the list on November 30, 2004: · http://lists.oasis-open.org/archives/security-services/200411/msg00131.html Optionally, a pointer to any minority reports submitted by one or more TC members who did not vote in favor of approving the Committee Draft, or certification by the chair that no minority reports exist. No such report exists.
Next in thread →
Next in month →