Concordia telecon 3 June 2008
From Project Concordia
Contents |
Attending
Georgia Marsh, Mike Jones, Ari Kermeier, Eric Tiffany, Paul Madsen, Bill Young
Next Meeting
June 17
NTT OpenID+SAML use case
Paul: Not yet ready -- still prioritizing use cases for various inputs. Perhaps have something on the next call.
The "bootstrapping bucket"
What does that mean, exactly?
Paul: Historically, that has meant to Liberty how to bootstrap from SAML into IDWSF, but in the concordia now this probably interpreted to mean InfoCard -> ID-WSF, and OpenI->SAML
Bill: yes, there is interesting work going on in the InfoCard space.
Big SAML Authentication Context Conundrum as well
Mike: what is the conundrum?
Paul: there seem to be two ways of conveying authn info, either AuthnContext or Attributes.
Eric: [reviews, ad nauseum, the background of how Authn information is represented in various deployments, and new work in SSTC to enable better use of Attributes and AuthnContext to convey Authn info, particularly wrt conveying Level-of-Assurance (LOA) info.]
Paul: Is this an SSTC call or a concordia call?
Eric: attempts to connect the AuthnContext/Attribute discussion to Concordia by emphasizing that in SAML (soon) you will have a couple of options for requesting and receiving Authn information (LOA and otherwise). Integrating with that SAML environment from other Identity frameworks (OpenID/PAPE, InfoCard) may present some interesting challenges and decision points. [I took a lot longer to say that on the call]
Question as to whether there is a roadmap in Concordia about how these integration scenarios will be addressed and prioritized.
Paul: first step on that roadmap might be the SAML/OpenID Concordia usecases which will be submitted "soon" by NTT.
DIDW workshop?
Paul: Britta discussed with Eric Norlin, who has set aside a 45min panel slot for (tentatively) "Bootstrapping". Sept 8-10, in Anaheim.
F2F at Catalyst
Perhaps this will be a good opportunity to work on existing and new use cases.
