Minutes for November 22-Nov SSTC con-call

[Anthony Nadalin <drsecure@us.ibm.com>]

Minutes for November 22-Nov SSTC con-call

Attendance of Voting Members

Steve Anderson BMC Software
Abbie Barbir Nortel
Sharon Boeyen Entrust
Brian Campbell Ping Identity
Carolina Canales-Valenzuela Ericsson
Scott Cantor Internet2
Peter Davis NeuStar
Heather Hinton IBM
Jeff Hodges NeuStar
Ari Kermaier Oracle
Hal Lockhart BEA Systems, Inc
Prateek Mishra Principal Identity
Jahan Moreh Sigaba
Bob Morgan Internet2
Vamsi Motukuru Oracle
Anthony Nadalin IBM
Rob Philpott RSA Security
Irving Reid Hewlett-Packard Company
Eric Tiffany IEEE Industry Standards
Greg Whitehead Trustgenix
Emily Xu Sun Microsystems


Attendance of Non-Voting Members

Prasanta Behera Individual
John Hughes Individual
Rick Randall Booz Allen Hamilton
David Staggs Veteran's Health Admin


Attendance of Applicants

John Moehrke GE Healthcare


Membership Status Changes

Conor P. Cahill Intel - Changed affiliation to Intel 11/15/2005
Colin Wallis NZ State Svcs Commission - Granted membership 11/21/2005
Jim Lien RSA Security - Lost Voting Membership after 11/22/2005 call
Gilbert Pilz BEA Systems, Inc. - Lost Voting Membership after 11/22/2005 call
Nick Ragouzis Enosis Group - Lost Voting Membership after 11/22/2005 call
Prasanta Behera Individual - Granted Voting Membership after 11/22/2005 call
John Hughes Individual - Granted Voting Membership after 11/22/2005 cal

1. Attendance
2. Approve minutes of 8-Nov con-call:
a. Minutes from Nov 8 TC call with revised attendance
Minutes accepted
3. Errata review: draft-20
a. http://www.oasis-open.org/apps/org/workgroup/security/download.php/15514/sstc-saml-errata-2.0-draft-20.pdf
Open items: 37 and 38
Item 37
Motion to accept item 37 second by Peter Davis, motion passed no objections
Item 38
Scott explained the added text
Change read to group - spelling error needs to be corrected
Motion to accept item 38 - proposed Bob Morgan, second Jeff - motion passed no objections
Open items still remain 10, 23, 32
4. List discussions:
a. (Prateek) Comments on draft-cantor-saml-sso-delegation-01
Prateek posted rambling, waiting for others to join discussion
Prateek, wanted to know how folks were attaching SAML tokens to back-end flows, there seems to be usecases but no solution, issue around delegation
Discussion around audit of identity assertions, discussion to continue on list
b. (Scott) RE: [security-services] Two potential errata items
Covered items 37 and 38 above
c. Scott, Conor - [saml-dev] Subject confirmation.
Nothing TC needs to do here
Scott asked if anyone had reviewed the 3rd party proposal, please review its on the list
5. Process for obtaining SAML implementation feedback?
a. From interop events
Rob had discussions with Eric on feedback on interop, how to items get reported back to TC
Eric explained that the problem that Rob talked about did not get reported as he was not on the SSTC at the time he did not have a way to report back
Rob suggests that the chairs accept any input or dev list or comments list to pass on the issue found at interop
Need a way to get input into SSTC
Heather wants to know how to get feedback into conformance tests, Eric explains that so feedback has to go to Liberty TEG right now
Heather has issue about Liberty SAML conformance and SAML conformance, how does the process get fixed, on how bugs are reported and fixed
Greg suggest that we might want to write a profile of the XML DSig
6. AI review (see below)
216 - open
237 - open, he will clarify, open an errata item
180 - no owner
234 - open
238 - open
224 - move forward to committee spec status Rob to work on
241 - open
230 - Eric will work on, open an errata item
240 - in progress - Abbie will update
235 - in progress


7. Any other business?
Bob Morgan has update on IETF and SAML usage, darft of SAML for SXIP, needs more input, contact Bob, Bob will send note to list
Interest in using SAML in GSSAPI and SASL, contact Bob
List started on web signon (DIX), some folks may think SAML is appropriate, Bob to send note to list

8. Adjourn

Anthony Nadalin | Work 512.838.0085 | Cell 512.289.4122