Minutes for 1-July SSTC con-call meeting

Minutes for SSTC Telecon, Tuesday 1 July 2003

Dial in info: +1 865 673 3239 #238-3466

Minutes taken by Rob Philpott

======================================================================

Summary ======================================================================

Votes:

- Minutes from 24 June 2003 call accepted

- Approved current specs as official Committee Specifications. Unanimous. More than 2/3 of SSTC membership was present for the vote.

- Approved sending SAML Committee Specifications to OASIS for standardization vote as soon as prerequisites (attestations, IPR notice, etc) are met. More than 2/3 of SSTC membership was present for the vote.

Previous Action Items Still Open:

- #0038: Continue developing meta-data specs

- #0013: Request use of WS-Trust for CC Proposal

New Action Items:

- Rob to accept changes in -core and post as part of V1.1 specs.

- Prateek to set up 3 new ballots for F2F options.

- Prateek to notify all members of current IPR policy and claims.

======================================================================

Raw Notes ======================================================================

Roll call - Attendance attached at bottom of notes. 19 members present which satisfies both quorum and 2/3 of membership needed for CS and submission votes.

> 1. Accept minutes from 24 June meeting

> http://lists.oasis-open.org/archives/security-services/200306/msg00013.html

- [VOTE] unanimous consent, accepted

> 2. Vote on submission of the SAML 1.1 candidate specification set for

> consideration as an OASIS standard

- Rob: We actually require 2 votes. First re-affirm committee spec's, then vote to submit.

- Hal: Technically are not re-affirming -core since it was modified.

- Phil: Move to approve current spec's as SSTC Committee Spec's

- Hal: Second

- [VOTE] unanimous consent, accepted

- Bob M: Move to submit Committee Specifications to OASIS for standardization

- Phil: Second

- Eve: Friendly amendment - submit as soon as pre-requisites are met.

- Bob M: Friendly accepted

- Discussion:

- Frederick: Any comments from Liberty?

- Jason: No outstanding comments from Liberty.

- Jeff: Checked to ensure Liberty has no dependence on RespondWith, which is being deprecated.

- Bob M: Fwd'ed email from David Chadwick with concern about deprecation of RespondWith

- Rob: We should make sure we understand their use case and address it in 2.0 either with a resurrected RespondWith or something more appropriate.

- Bob M: Did XACML comments get sent to SSTC? They were discussed on the XACML list.

- Hal: Yes, we (SSTC) got those and agreed to put on the list for SAML 2.0.

- End of discussion

- [VOTE] unanimous consent, accepted

- [ACTION] Rob to accept changes in -core and post to list.

> 3. Solicitation of implementation attestation

- Rob: We haven't received the minimum 3 yet.

- Irving: Baltimore is in test/debug and should have one in by the 15th.

- Prateek: We should discuss IPR requirements also

- Rob: Requirement is for chairs to formally notify all members of IPR policy and known claims.

- Jeff: Refer to Joe Pato's notice for V1.0 in the archive for cut/paste.

- [ACTION] Prateek will send out IPR notice to the list.

- Rob: Attestations also require statement of compliance with IPR policy and claims.

> 4. SAML F2F ballot results

- Prateek: Ballots indicate preference for early Sept.

- Eve: Original recommendation for first week of Sept was to allow Tuesday (9/2) as a travel day; meet Wed morn, Thursday, and ½-day Friday.

- various discussion took place over preferences for the week and coast.

- Jeff: Propose doing 3 new ballots: One for 9/2-4 (Wed morn-Friday afternoon), one for 9/8-10 (Mon afternoon-Wed); 9/10-12 (Wed morn-Fri noon).

- Eve: Sun can host East coast (actually either coast).

- Rob: If Sun has any problems - let us know RSA can also host.

- Prateek: Can we settle on a coast to minimize balloting?

- Hal: there was a slight preference for west coast in first week; east coast for 2^nd week of Sept.

- Prateek: Proposes east coast for this one and west coast for subsequent one. No major objections.

[Editorial note - on 10-June, Hal also volunteered BEA to host East Coast as long as attendance is under 25].

- [ACTION] Prateek: set up 3 ballots for East coast F2F.

> 5. Action Items

> 0048 Make Editorial comments to CS specs

> Eve Maler

- Eve provided updates with Rob review/edit. Core document posted to list.

- Closed.

> 0038 Continue developing meta-data specs

> Jahan Moreh

- Reassign to Prateek.

- Remains Open.

> 0013 Request use of WS-Trust for CC

> Maryann Hondo

- Hal - Carlisle Adams has left Entrust. Is CC now an orphaned item?

- Jeff - believes Tim will champion it and Jeff will help.

- Remains Open.

> 0004 Propose WSDL for metadata

> Prateek Mishra

- Close this item and track it as part of AI 38.

> 6. Any other agenda items

- Rob: Next meeting is 7/8 - back on 2 week schedule.

- Adjourn

----------------------------------------------------------------------

Attendance of Voting Members:

Irving Reid, Baltimore

Hal Lockhart, BEA

Krishna Sankar, Cisco

John Hughes, Entegrity Solutions

Kevin Shanley, Entrust

Jason Rouault, HP

Scott Cantor, Individual

Bob Morgan, Individual

Mike White, Individual

Prateek Mishra, Netegrity

Frederick Hirsch, Nokia

Charles Knouse, Oblix

Simon Godik, OverXeer

Rob Philpott, RSA Security

Dipak Chopra, SAP

Jahan Moreh, Sigaba

Jeff Hodges, Sun

Eve Maler, Sun

Phillip Hallam-Baker, Verisign

Attendance of Observers or Prospective Members:

Ron Jacobson, CA

Frank Siebenlist, Argonne Nat'l Lab

security-services message