Q: how many services do you anticipate including in COIN?
A: depends upon which are capable - we expect 5 by the end of the year. AlFresco and WebEx are there now, WebEx, Confluence, and Jira are forthcoming, as well as others. Q: how many of these services will use the same means to connect?
A: hoping that commercial vendors are willing to cooperate... Initially will need to have sponsors to convince vendors to make the necessary changes. It will be good to join forces internationally to leverage our market power. Q: Is the Google integration custom?
A: Google Apps is in the federation, but providing their groups context to Google has not yet been solved. They are hoping to convince Google to take this on.
Jonathan Markow, Jasig - Context from the program committee
IdM is a large and diffuse problem space. How can we get organized to work in a similar direction, and leverage each others' work
It is useful to hear what each group is working on, then we can work these into breakout topics
Will Norris, Google Q: What is the relationship between X-OAuth and MoonShot?
A: Probably not much, since X-OAuth still requires a browser
Q: Are you really proposing to popup a user/password dialog box (Yahoo user authenticating to Yahoo to access a Google service) and not expecting users to enter their password?
A: This is just a proof of concept, but they understand that the UI needs work
PYSAML2 Q: are particular SAML profiles included in your testing?
A: yes, used existing profiles as a start, then going beyond... Q: What are the release plans?
A: There was an early release about a month ago, but it would be best to check out the trunk. The project is in search of a sponsor to support further work, in which case more releases will come Q: what other groups have had input into the requirements?
A: there are communities around apps that use SAML, but the project is still in the early stages.
Q: a standard set of authn protocols, and a standard set of APIs to common apps, and a richly functional suite of IAM apps implemented per a set of standards - how can we get there?
A: external consultants, with support contracts, are a useful thing in pushing this forward. Note where Linux was before RedHat started offering support... Comment: Note the components in our environments not listed in the component diagram. We need to take those into account... Comment: we need to work from the data upward, as important as working from the apps downward...
Keith Hazelton, U. Wisconsin - Madison - EduroamUS