Notes from RSA OASIS IMI Interop Telecon - 1PM PT Monday 2010-02-01

[Drummond Reed <drummond.reed@xdi.org>]

Title: Federal Identity, Credentialing, and Access Management TFPAP, Version 1.0.1, September 4, 2009

RSA OASIS IMI INTEROP TELECON NOTES

Monday 2010-02-01 1-2PM PT

 

ATTENDING

 

Patricia Wiebe

Tony Nadalin

John Bradley

Ron Carpinella

Drummond Reed

Ashish Jain

Jane Harnad

Phillip Kenney

Dale Olds

Mike McIntosh

Mike Jones

Paul Trevithick

Mary Ruddy

Matt Tebo

Rob Carraway

 

1) JANE – OVERALL LOGISTICS

 

* She just received the exhibitor manual. She will send it to the Interop mailing list. Drummond and/or Mary will then distribute it to the ICF members who will be participating in the ICF presence as part of the show.

 

* Drummond asked about the setup hours on Monday. Jane said that information is in the exhibitor’s manual. She said will send out a note about the specific hours to the Interop mailing list tonight.

 

* Jane recommends keeping computer monitors within the 20”-24” size range.

 

* Each participant in the IMI Interop (ICF counting as one participant) will have an ~3-4’ table with two chairs.

 

* Mike asked if OASIS will be making the signs. Jane confirmed that yes, OASIS will be making the signs.

 

* Jane will be sending out a floorplan for everyone to review.

 

2) JOHN – TECHNICAL INTEROP SCENARIOS

 

* First, John explained that the core scenarios for the Interop will be demonstrating the IMI 1.0 Profile published by the US GSA, by showing cards issued in conformance to the profile accepted by RPs that are conforming to the profile.

 

* We discussed how “real” and “live” the demonstrations would be. It was clarified that some LOA 1 RPs will be real and live, but all LOA 2 and 3 scenarios will be demos because the IdPs have not been certified for those levels yet.

 

* Ron confirmed that Equifax can do at least LOA 2 and may be able to do LOA 3. The live LOA 2 service is for US citizens only (Ron thinks it may expand to US residents soon). Ron also clarified that Canadian data is separate, so Equifax cannot verify a Canadian citizen for the US government (yet).

 

* John mentioned that we don’t want to issue test cards that will then be confused with real cards when the sites go live.

 

* In terms of RPs, Dale said he believe Novell wants to show one. Ron said that he knows Equifax is interested in demonstrating an RP, but he needs to confirm whether they can be ready by RSA.

 

* There is the need to show an issuer that issues the correct claims but is not on the white list. To be specific, the scenario is to show a card that contains an LOA 2 claim where the issuer is only certified at LOA 1.

 

* John volunteered to collect the information and disemminate the white list. For this demonstration, the assumption will be that this white list information will be manually configured into each participant.

 

* Matt Tebo asked, on behalf of the GSA, how as an RP he can test against the different IdP cards. The two pieces of information he needs are: a) where can he get the card (URL), and b) who can he contact to ask questions about the cards.

 

* The IdPs are currently PayPal, Equifax, BC Gov (LOA 1). Mike M said that Azigo may be willing to set up a fake issuer if necessary to show an LOA 2 or 3 example. If they did so they would also do LOA 1. John asked if this Azigo card could do LOA 1, 2, and 3, as it would be nice to demonstrate one card that does all three.

 

* Paul had a question for the RPs: in order to demonstrate cards working on an iPhone, the RP needs to add a special link to its site that puts the object tag in a URL format (an alternative invocation format). Matt (for GSA) and Phillip (for CA) both said that they would be interested in tackling this but AFTER they cover the “bread and butter” basics first.

 

* There was general agreement that we should hold a “pre-interop” testing period the week before RSA. Matt proposed that we have a “dry run” on Friday the 19^th; there was consensus to use this date.

 

* We also agreed to the OSIS wiki and OSIS interop list for further communications on techical scenarios and coordination (vs. interop logistics and PR, for which we will use the OASIS reflector).

 

* Mike J asked that the highest priority information for the wiki be: a) the URL to get a card, b) the endpoints at which it can be tested, c) contact information for the person responsible, and d) a place for positive feedback. (Negative feedback should go to the contact person.)

 

* Mike J clarified that Microsoft will be demonstrating CardSpace 2.

 

ACTION ITEMS

 

# DRUMMOND will send an email to both the OASIS list of direct participants and to the ICF list of indirect participants asking anyone who will be involved with the technical scenarios in the interop to join the OSIS mailing list and wiki.

 

# JOHN to post information about the OSIS wiki pages we will be using to coordinate the technical scenarios in the Interop.

 

# JOHN to collect and post information about the white list that will be used in the Interop.