SSTC Draft Meeting Minutes - November 18th, 2008

[Duane DeCouteau <ddecouteau@sbcglobal.net>]

Please forward comments and corrections to list.  There was a request in 
'other business' that I missed can anyone provide?

Regards,

Duane

============================================================================
SSTC/SAML concall Tue Nov 18 09:05:00 PDT 2008
----------------------------------------------------------------------------

co-chair Hal Lockhart (hl) presiding.


----------------------------------------------------------------------------
Motions Passed:

    - Promote to Committee Draft SAML V2.0 Attribute Extensions 
(uploaded) 
http://lists.oasis-open.org/archives/security-services/200811/msg00026.html

        Scott Cantor motioned
        Eric Tiffany seconded
        unanimously approved

----------------------------------------------------------------------------
Action Items:
       Scott Cantor - Upload SAML V2.0 Attribute Extensions in Committee 
Draft Format.

----------------------------------------------------------------------------
Attendance:

Voting Members;

John Bradley      Individual    
Jeff Hodges     Individual   
Scott Cantor     Internet2   
Nathan Klingenstein     Internet2   
Bob Morgan     Internet2   
Eric Tiffany     Liberty Alliance Project   
Tom Scavo     National Center for Supercomputing Applica...   
Frederick Hirsch     Nokia Corporation
Srinath Godavarthi     Nortel   
Hal Lockhart     Oracle Corporation   
Brian Campbell     Ping Identity Corporation
Anil Saldhana     Red Hat   
Kent Spaulding     Skyworth TTG Holdings Limited   
Eve Maler     Sun Microsystems   
Duane DeCouteau     Veterans Health Administration  

Members:
Paul Madsen     NTT Corporation

Observers:
Greg Parsons     Jericho Systems Corporation  
Quorum Achieved: 15 out of 21 voting members

Membership Change:  Rob Philpott (RSA/EMC)  lost voting rights.

----------------------------------------------------------------------------
1. Approval of meeting minutes for November 4th, 2008
    - unanimously approved

2. Document Status

2.1 SAML V2.0 Attribute Extensions
Draft 2 uploaded
http://lists.oasis-open.org/archives/security-services/200811/msg00026.html

	- Document promoted to Committee Draft.

2.2 SAML V2.0 Holder-of-Key Web Browser SSO Profile
Draft 9
http://lists.oasis-open.org/archives/security-services/200811/msg00047.html

	Nate Klingenstein - will reconcile language when HOK is not required

2.3 SAML V2.0 Holder-of-Key Assertion Profile
Draft 6 uploaded
http://lists.oasis-open.org/archives/security-services/200811/msg00042.html

	Tom Scavo - This profile ready move along to committee draft, it is related to Nates work so will hold until that is complete.
	Brian Campbell - would like additional time to review.

2.4 Cross-Enterprise Security and Privacy Authorization (XSPA) Profile of
SAML
	Duane DeCouteau - Nothing to report at this time.

3.  Discussion Threads

3.1 Comments on Draft NIST Special Publication 800-63-1
http://lists.oasis-open.org/archives/security-services/200811/msg00048.html

	Hal Lockhart - No response to his emails,  does not have automatic reply setup...
 	Bob Morgan - will check into this..

3.2 Disposition of query re DER encoding issue
http://lists.oasis-open.org/archives/security-services/200811/msg00032.html
et all
+ deferment from last call

	Scott Cantor - seems each profile will take a different direction... becomes a profile by profile decision...NOT USING DER will lead to interop problems...really dependent on what you expect to do with certs...
	Tom Scavo - Still working issues...if you des x509cert element encoding will mostly if not at all be irrelevant




3.3 HIMSS InterOp Demonstration - Last call
http://lists.oasis-open.org/archives/security-services/200811/msg00049.html

	Anil Saldana - noted that OASIS only requires a letter of "intent to participate" from vendors by at this time.

3.4 Front-channel binding for attribute query
http://lists.oasis-open.org/archives/saml-dev/200811/msg00020.html


CD 1 uploaded
http://lists.oasis-open.org/archives/security-services/200811/msg00024.html

4. Other Business:



5. Previous Action Items
	0344,0343,0333,and 0332 remain open