Minutes from Feb 27 conference call

[Prateek Mishra <prateek.mishra@oracle.com>]

AI: Ari to respond to comments on x.509-attribute profile version 11

AI: Greg (and others) to investigate convergence with existing ID-WSF
work with parallels to "SOAP-flavored SSO Profile".


1. Roll Call & Agenda Review, Find volunteer minute taker

Quorum achieved, 15/25 present

Attendance of Voting Members


  Steve Anderson BMC Software
  Bhavna Bhatnagar Sun Microsystems
  Scott Cantor Internet2
  Heather Hinton IBM
  Frederick Hirsch Nokia
  Jeff Hodges NeuStar
  Ari Kermaier Oracle
  Hal Lockhart BEA Systems, Inc
  Eve Maler Sun Microsystems
  Prateek Mishra Oracle
  Bob Morgan Internet2
  Anthony Nadalin IBM
  Rob Philpott EMC Corporation
  Tom Scavo National Center for Supercomputing Applications
  David Staggs Veteran's Health Admin
  Greg Whitehead Hewlett-Packard Company
  Emily Xu Sun Microsystems

Attendance of Non-Voting Members

   Chris Laskowski Booz Allen Hamilton

Attendance of Observers

  Rajeev Angal Sun

Membership Status Changes

   Chris Laskowski Booz Allen Hamilton - Granted voting status after 2/27/2006 call
  Abbie Barbir Nortel - Lost voting status after 2/27/2006 call
  Carolina Canales-Valenzuela Ericsson - Lost voting status after 2/27/2006 call
  Peter Davis NeuStar - Lost voting status after 2/27/2006 call
  Dana Kaufman Forum Systems - Lost voting status after 2/27/2006 call

2. Approve minutes from February 13 con-call

http://www.oasis-open.org/apps/org/workgroup/security/email/archives/200
702/msg00025.html

Message 69 includes attendee list. Unanimous approval with
no objections.

3. OASIS Symposium Announcement?

- San Diego, April 16. Hal expects many interesting
  papers.

- Webinar on SAML as part of OASIS "week of webinars"
  Hal calls for volunteers who should contact chairs.

4. New Documents Posted

a) Technical Overview v13
http://www.oasis-open.org/archives/security-services/200702/msg00052.htm
l

5. List threads

a) Empty Response Issue
http://www.oasis-open.org/archives/security-services/200702/msg00028.htm
l

- This link points to the X.509-attribute-profile draft 11.

  Greg Whitehead response addresses part of this issue:
  http://lists.oasis-open.org/archives/security-services/200702/msg00029.html

  Ari to clarify language in Section 3.3.1 of the profile.
  

b) Example Domain Names
http://www.oasis-open.org/archives/security-services/200702/msg00032.htm
l

- Draft 13 has resolved this issue to address this concern. TC members
  should review and comment on the resolution.

c) Liberty Moniker
http://www.oasis-open.org/archives/security-services/200702/msg00047.htm
l

- TC agrees to replace "Liberty" by "SAML 2.0" in the security considerations
  document. 

d) Discovery Comments
http://www.oasis-open.org/archives/security-services/200702/msg00053.htm
l

- Seeking an appropriate title for document, Scott agrees that a different
  name is needed. Suggestion that it be titled "Idp discovery service protocol
  and profile".

- Scott to pick up proposed changes including reporting errors to the end-user.

e) Authn Attribute Fork Confusion Resolved?
http://www.oasis-open.org/archives/security-services/200702/msg00061.htm
l

- The problem is keeping track of the history of these document. Ari to
  pick up revision history from the "old" draft 11.

and Comments
http://www.oasis-open.org/archives/security-services/200702/msg00065.htm
l

- Last part of the message has the more general message.
  Ari to review, take discussion to the list if necessary.

f) SOAP-Flavored SSO profile
http://www.oasis-open.org/archives/security-services/200702/msg00062.htm
l

- Discussion on next steps with document. 

- Scott points out that the use-case is similar to that already
  covered in ID-WSF

- Suggestion that use-case motivation be added to the document

- Hal asks if the Liberty ID-WSF materials can be published into SSTC

- Greg to consult with Liberty Alliance and convey interest in figuring
  out a single approach to the problem

6. Document Status

a) Simple Sign - voted to CD and public review Jan 30 
Still pending minor changes?

- Scott to update CD with editorial changes and upload to repository
       
b) Discovery Service - published Jan 30
Another revision?

- discussed above 

c) Technical Overview
Further revision?

- version 13 has been published
- We plan to conduct a public review vote of the document at the next meeting

7. Errata Document - walk thru
http://www.oasis-open.org/archives/security-services/200702/msg00019.htm
l

- We vote on this document (following the new errata process)
- Rob Philpott moves to approve CD draft, Eve maler seconds.
- Approved as CD draft
- Eve Maler, moves to place document into public review, Rob Philpott
- No objections to either motion, note that full majority vote is 
  available.

8. Open AIs

#0277: Technical Overview Next Steps
Owner: Paul Madsen
Status: Open
Assigned: 2007-02-12
Due: 2007-03-10

[ CLOSED ]