[security-services] Minutes for SSTC Call (June 15, 2010)

[Emily Xu <emily.xu@oracle.com>]

Thomas Hardjono wrote:
> Folks,
>
> Below is the proposed agenda for SSTC Call on June 15th.
>
> Please let us if you have additional items.
>
> Regards.
>
> Nate+Thomas
> -----------
>
> _______________________________________________________
>
> Proposed Agenda SSTC Conference Call
> Tuesday 15 June 2010, 12:00pm ET
>
> Call-in toll-free number (US/Canada): 866-699-3239.
> Call-in toll number (US/Canada): 1-408-792-6300.
> Attendee access code: 203 956 41.
> See additional Webex Voice Info at end of Agenda.
>
>
> AGENDA:
>
> 1. Roll Call & Agenda Review.
>
>   
Quorum achieved.
> 2. Need a volunteer to take minutes.
>   
Emily Xu to do minutes.
> 3. Approval of minutes from last meetings:
>
> Minutes from SSTC Call on 1 June 2010:
> http://www.oasis-open.org/apps/org/workgroup/security/email/archives/201006/msg00013.html
>
>
>   
Approved unanimously.
> 4. AIs & progress update on current work-items:
>
>   (a) Current electronic ballots: HOK Browser SSO.
>
>   
The ballot wasn't approved.
Approved unanimously to resubmit the ballot.

AI: Thomas to resubmit it to OASIS.
>   (b) Status/notes regarding past ballots: None.
>   
N/A
>   (c) SAML V2.0 Holder-of-Key Web Browser SSO Profile Version 1.0 as a CS
>        - Status: Ballot open until Sun night 11pm EST.
>        - Note: the new Oasis online ballot request.
>   
Save as 4(a).
>   (d)  SAML V2.0 Holder-of-Key Assertion Profile Version 1.0
>        - Status: CS-01 version of this doc is on WiKi.
>        - AI: Thomas to ask Mary to move into Doc tree.
>        - Status: still awaiting Mary.
>
>   
Still waiting for Mary.
>   (e) Kerberos related items. [Josh/Thomas]
>         - Kerberos Web Browser SSO Profile: 
>         - Status: In 60-day review.
>
>   
Still in 60-day review. The review period will end soon.

>   (f) Expressing Identity Assurance profile for SAML2.0 (LOA) 
>         - Status: In 60-day review.
>   
Still in 60-day review. Please review and submit comments.
After the review period ends, Scott to prepare a proposal/suggestion to 
restructure the draft.
>   (g) Older docs: Thomas has formally asked Mary to post these 4 docs (3/11th)
>         (I) Protocol Extension for Third-Party Requests (CS-01)
>        (II) Protocol Extension for Requested Authentication Context (CS-01)
>        (III) Shared Credentials Authentication Context Extension and Related Classes (CS-01)
>        (IV) Text-based Challenge/Response (CS-01)
>         - Status: Still awaiting response from Mary.
>   
Still waiting for Mary.
Scott: The links to approved erratas need to be changed.
AI: Thomas to contact Mary to have them corrected.

>   (h) NSN Attribute Management proposal (Thinh/Phil) - u[dates
>   
<EMILY: sorry, couldn't tell whether it was Thinh or Phil who made the 
comments>
Thinh/Phil: updated the doc. Some changes are: added three suggestions; 
user provisioning related use cases; added subject to describe it more; 
Response; DelineAttributes; new Status code; added processing rules.
Scott: account state management should not be addressed in SAML. It is 
outside the domain of the standard.
Thinh/Phil: will remove/update it.
Scott: be careful with anything related to state management in our spec
Thinh/Phil: changes to section around management nameid request?
Scott: it's ok to reference it
Thinh/Phil: should we change text around add subject?
Scott: extending the name identifier is ok
Thinh/Phil: use case section is updated
Thomas: the pictures regarding the usecases are very helpful.
Federico will see if he could add some drawings to explain the use cases 
from Telecom Italia.

>   (i) SSO initiation draft (Scott) - update
>       Status: Waiting to initiate public review of it and other documents.
>
>   
Scott has a new draft. Please take a look at it.
>  
> 5. New work items: none.
>   
None.
> 6. Assorted threads on saml-dev/comment list:
>   
None.
> 7. Propose an SSTC Face-to-Face meeting for September 2010:
>    - Awaiting for room confirmation.
>   
After getting the room confirmation, then we'll decide whether we will 
have a Face-to-Face meeting or not.

> 8. Next Call: Tuesday 19 June, 2010. 
>
>   
Next call is June 29.

Meeting adjourned.