Minutes of March 19, 2010 XSPA Conference Call

Minutes of XSPA Conference Call

Friday, March 19, 2010, 1:00pm ET

Dial in info: +1 800 767 1750

Access code 97728 [i.e. XSPA T(C)]

1. Roll Call & Agenda Review

Voting Members:

Daniel Dority Jericho Systems Corporation

Anil Saldhana Red Hat

John Davis Veterans Health Administration

Duane DeCouteau Veterans Health Administration

David Staggs Veterans Health Administration

Members:

John Moehrke GE Healthcare

Observers:

Dr. Jiandong Guo, Oracle

Quorum (5 of 6 Voting Members)

2. Minutes of February 5 2010 were approved:

http://www.oasis-open.org/apps/org/workgroup/xspa/email/archives/201002/msg00012.html

3. Discussion on the success of the RSA’10 demonstration. David thanked Dee Schur and Jane Harnad for their help in the planning and presentation of the XSPA profiles at RSA. There was a lot of traffic at the booth and we were able to refine the WS-Trust profile and focus the normative sections on the WS-Trust specific elements.

4. A new version of the Cross-Enterprise Security and Privacy Authorization (XSPA) Profile of WS-Trust for Healthcare was uploaded:

http://www.oasis-open.org/committees/document.php?document_id=36944

Mike suggested Figure 1 be replaced with a diagram focused on the WS-Trust interaction. David asked that the reference to ASTM E1986 be updated to the 2009 version. The group suggested Table 5 use the term P (preferred) instead of M (mandatory) in certain cells, so that implementers could have flexibility over the use of runtime and static attributes.

MOTION: that the TC approve the profile as a committee draft with the changes indicated by the TC during the call by Daniel. Seconded by Duane.

DISCUSSION:

MOTION PASSED:

The profile will become CD and be labeled: xspa-ws-trust-profile-cd-03

5. Next steps for WS-Trust

David requested all members review the CD and suggest corrections. If the TC agrees at the next meeting, we can consider requesting the CD be moved to Public Review draft (The first public review of a specification must take place for a minimum of 60 days, and any subsequent reviews must be held for a minimum of 15 days).

6. ITU

A public comment period is now open for the OASIS proposal to submit the SAML and XACML XSPA profiles to the ITU.

7. General discussion

Duane asks for information on the project within IHE to add XSPA terminology to the XUA. John Moehrke gave an update on the proposal, stating XSPA terminology is one of several that are being considered for use in XUA.

8. No active action items.

Meeting adjourned.

David Staggs, JD, CISSP (SAIC)
Veterans Health Administration
Chief Health Informatics Office
Standards and Interoperability
Office: 858 433 1473

xspa message