Proposed Agenda SSTC Concall, September 25, 2007

["Hal Lockhart" <hlockhar@bea.com>]

Proposed Agenda SSTC Concall, September 25, 2007

Dial in info: +1 865 673 6950
Access code: 270-9441#

Roll Call & Agenda Review

Need a volunteer to take minutes 

1. Approve minutes from September 11
http://lists.oasis-open.org/archives/security-services/200709/msg00020.h
tml

2. Administrative
2.1 ESOE Beta 1 -- Enterprise Sign On Engine
http://lists.oasis-open.org/archives/security-services/200709/msg00025.h
tml


3. Document Status

3.1 Docs on their way to OS
Metadata Profile for the OASIS Security Assertion Markup Language (SAML)
V1.x
& Metadata Extension for SAML V2.0 and V1.x Query Requesters

Will go for OASIS vote in October

3.2 Docs pending public review

Pending 15 Day Review
*SAML V2.0 Attribute Sharing Profile for X.509 Authentication-Based
Systems (CD 04)
*SAMLv2.0 HTTP POST "SimpleSign" Binding (CD 02)

The following are needed.

1. The dates of the original 60-day review, including a link to the
announcement 

2. The comment resolution log of any reported issues 

3. A change-marked copy of the spec noting the differences from the
version submitted for the 60-day public review.


Pending 60 Day Review
*SAML V2.0 Deployment Profiles for X.509 Subjects (CD 02)
*Identity Provider Discovery Service Protocol and Profile (CD 02)

Need work on conformance sections:

SAML V2.0 Attribute Sharing Profile for X.509 Authentication-Based
Systems - contains no conformance section

SAMLv2.0 HTTP POST "SimpleSign" Binding - contains an inadequate
conformance
section:
"A specification that is approved by the TC at the Public Review Draft,
Committee Specification or OASIS Standard level must include a separate
section, listing a set of numbered conformance clauses, to which any
implementation of the specification must adhere in order to claim
conformance to the specification (or any optional portion thereof)."


3.3 SAML v2.0 Errata
http://lists.oasis-open.org/archives/security-services/200708/msg00030.h
tml (AI#305)

Abbie was to discuss work with Eve.

4 Discussions

4.1 SAML metadata lifecycle issues

Anyone prepared to discuss this?

4.2 Proposal for extensions to Authentication Context 

Giles to attend the call for discussion

Hal posted some previous off-list discussion

5 Other business

6 Action Items (Report created 25 September 2007 12:38am EDT)
 
#0283: Change final arrows to solid in Tech Overview diagrams
throughout.
Owner: Paul Madsen
Status: Open
Assigned: 2007-03-27
Due: ---

#0304: Incorporate appropriate use of LDAP language tags in new LDAP
attr profile
Owner: Scott Cantor
Status: Open
Assigned: 2007-08-23
Due: ---

#0305: Prepare final version(s) of the SAML v2.0 Errata document
Owner: Abbie Barbir
Status: Open
Assigned: 2007-08-23
Due: ---

#0308: Recommend wording on potential erratum on metadata and DNSSEC
Owner: Peter Davis
Status: Open
Assigned: 2007-09-18
Due: ---

#0309: Locate the link to the current "working errata" document and
follow up with Abbie Barbir (who we think volunteered) about getting the
new crop of errata recorded.
Owner: Eve Maler
Status: Open
Assigned: 2007-09-18
Due: ---


Hal