SSTC teleconference minutes, 23 February 2010

[Frederick Hirsch <frederick.hirsch@nokia.com>]

Minutes  SSTC Conference Call
Tuesday 23 February 2010, 12:00pm ET

1. Roll Call & Agenda Review

11/19 present, quorum achieved

2. Need a volunteer to take minutes

Frederick Hirsch took minutes.

3. Approval of minutes from last meeting (9 Feb, 2010):

http://www.oasis-open.org/apps/org/workgroup/security/email/archives/201002/msg00017.html

Motion: Approve minutes from 9 Feb 2010
(Moved Rob P, second Scott C)
Approved without objection.

4. AIs & progress update on current work-items:

  (a) Current electronic ballots: None open.

No new report

  (b) Status/notes regarding past ballots: (none)

No new report

  (c) SAML V2.0 Holder-of-Key Web Browser SSO Profile Version 1.0 as a  
CS
           SAML V2.0 Holder-of-Key Assertion Profile Version 1.0
        - Status: Thomas has emailed Mary asking about this doc.

Waiting for response from Mary.
Note that Mary asked chairs to send 1 email per request to TC-Admin
Thomas will resend to Mary, 1 email per request for all documents.

  (d) Kerberos related items. [Josh/Thomas]
        - Attribute Profile and the Subject Confirm Method docs are in  
60-day review.
        - Kerberos Web Browser SSO Profile:
              - Josh to provide updated version for SSTC reading [DONE]
              - Want to move to CD

Josh not on call. Scott notes care needed to make sure document is  
correct before progressing the document.

ACTION: Scott Cantor to review Kerberos Web Browser SSO Profile, make  
sure no additional cleanup needed before publication

  (e) Expressing Identity Assurance profile for SAML2.0 (LOA)
       - Bob has done all corrections Mary asked for.
       - Status: Thomas has asked Mary about starting 60-days review  
for this doc.

Edits have been completed, document has been uploaded. Next step is to  
share with TC-Admin to start public review (request  including all  
links as needed).

Hal reminds group that Mary did video on how to create URLs, sent on  
chairs list.

  (f) CS version of Text-based Challenge/Response profile.
       - AI: Hal to request Mary to publish 2007 CS version of doc.

Thomas to remind TC-Admin of request, with correct URLs.

Scott notes generic Jira could be used to submit TC-Admin requests and  
track them, Hal notes that TC-Admin is using Jira to allow tracking.  
Frederick Hirsch to ask Process Committee whether requests can be  
raised directly in Jira.

  (g) Errata doc:
       - Scott: will close both issues and publish a new "Approved  
Errata" working
                   draft as the basis of a future errata CD.

All outstanding items have been posted to Jira, Scott updated the  
"approved errata working draft" updated as a Working Draft. Will  
modify this document going forward as needed.

Scott working on publishing updated "Approved Standard with Approved  
Errata".

   (h) NSN Attribute Update proposal
       - Updates(?)
       - Discussion

Scott Cantor sent comments, Thinh will review the comments this week.  
Scott offered to clean up the document once agreement reached on  
substance.

5. New work items: none.

John noted that GSA has released ICANN profile for SAML 2.0,  
circulated to eGov mailing list, could be shared with SSTC. Posting a  
link to the public SSTC list would encourage feedback from the  
relevant SAML community (but would be publicly visible).

Hal Lockhart announced that he plans to resign as co-chair on 9 March  
after four years of chairing SSTC, but continue participating in the TC.

6. Assorted threads on saml-dev/comment list:
       - Trust in artifact resolution

Scott notes that the topic is about using SAML in a Radius type  
interaction. Scott will ask for this to be shared on SSTC list.

7. Next Call: Tuesday 9 March, 2010.

Adjourn.