Minutes

Attending: Judith Bush, Janemarie Duh, Matthew Economou, Heather Flanagan, Eric Goodman, Steve Premeau, Mark Rank, Keith Wessel

With (Also Starring): David Bantz, IJ Kim, Kevin Morooney, Nicole Roy, David Walker, Ann West, Steve Zoppi

Regrets: Matthew Brookover, Les LaCroix, Mary McKee

Status Updates - Q&A

• T&I and Ops Updates (Ann/Nic/Albert/Shannon/Dave/Johnny)
  • This month's IAM Online will highlight experiences of participants in the Collaboration Success Program. BaseCAMP is next month. There's starting to be some thought about in-person events in the future.
• SeamlessAccess, International, and Browser Interaction updates
• Working and liaison group updates - including 2021 plan items
  • CACTI Update
  • CTAB Update

Steering Overview for the Deployment Profile Analysis

• This will be scheduled for Steering's July meeting

2021 Work Plan Check In

• The plan: https://docs.google.com/document/d/16KT4An74VP0RybWzm1WHeDBWQ__7BExXIJUEL0UuAvE/edit
• SeamlessAccess
  • Recent browser interaction issues impact the “button” functionality for SPs, but the discovery services are not impacted.
  • The Federation Operations workshop in late June / early July can help determine how it could benefit federations, InCommon in particular.
  • TAC will discuss this issue again after the workshop.
• The Adopt SAML Deployment Profile, Subject Identifier, Federation Testing, Assurance, HECVAT, and Browser Technology Changes are probably where they need to be (with respect to their relationship to the TAC).
• Nic would like to see the MDQ spec formalized. It’s currently an IETF draft “informational” document. Perhaps move to OASIS? Shibboleth Consortium?
  • Steve Premeau in chat: “I think it's this document, but others may have more accurate information: https://datatracker.ietf.org/doc/html/draft-young-md-query-14“
• Should we start work on the R&E deployment profile?
  • R&E issues include metadata consumption, logos, among others.
  • Wait for experience with the generic deployment profile? Perhaps do a quick assessment of R&E needs to see if implementation of the generic profile might move people away from the future R&E profile?
  • Should this be a REFEDS item?
  • We’ll table this issue for now.
• Other Issues
  • From Judith in chat: “https://datatracker.ietf.org/doc/html/rfc7258 has been interesting to review in light of the browser fun. It is brief and clear."
  • Should we schedule some form of community event to discuss the 2021 work plan?
    • It’s probably been close to two years since we’ve done one, because of the pandemic.
    • The consensus was yes, we should do this.

Administrivia

• The next TAC call (17 June) is canceled)

EMail Updates

SeamlessAccess, International, and Browser Interaction updates

June Conferences
June offers a wealth of conference opportunities for the higher ed identity practitioner.

• Trust and Identity updates and strategy consultation - June 15
• REFEDS - June 16
• FIM4R Virtual Assurance Workshop - June 17
• FIM/ORCID Affinity Group meeting - June 17
• TNC21 - June 21-15

And for something not higher ed specific, but still relevant in the identity space (and scheduled in Mountain Time) :

• Identiverse (hybrid virtual/in-person conference) - June 21-23

REFEDS
MFA subgroup - The assurance Working Group has spun up a group to focus on an MFA profile. This is still early days for the group, so if this is an area of interest, now would be a good time to join.

And to get on your calendars early, REEFDS will likely have a meeting adjacent to CAMP on Thursday, 30 September @ 11:00-14:00 EST.

SeamlessAccess
SeamlessAccess has (re)scheduled to Federation Operators workshops, an APAC-friendly time on June 28 and 29, and a Europe/US-friendly time on July 1 and 2. Topics will include reviewing the SeamlessAccess roadmap, walking through the different integration models, and discussing fed op requirements.

Browser Interactions
The W3C workshop on Federation and Browsers, held May 25 and 26, was a great success. Notes are available in the WebID GitHub repository. One of the key outcomes of the meeting is the creation of a new W3C federated identity community group. The charter for that group is under development (see https://github.com/hlflanagan/fedidcg). The goal is to have that group up and running by July.

Heather Flanagan — Translator of Geek to Human
https://sphericalcowconsulting.com 

CACTI Update

Dear all,

At the May 25 CACTI meeting, Chris Phillips and John Bradley reported that the OpenID Foundation (OIDF) Multilateral OIDC spec is ready for review and vote.  The review process is open to the entire community, but voting requires membership.

CACTI plans a presentation on Secrets Management for the July 20 IAM Online.  A subcommittee that includes TAC representation will develop a presentation abstract; any TAC input on the topic will be gratefully received.

Best wishes,
Matthew

CTAB Update

• Discussion of AAWG and other REFEDS working groups. (I was late so missed most of the detail here)
• Discussion of NIH compliance tool status.
• Discussion of BEv2 compliance status, how to handle non-compliant (or non-compliant “yet”) and working on updates to FM notification messages. (Most notably to SP contacts)
• Questions and concerns about the WebID initiative.

Test Fed WG Update

I am crafting the email that will go to the REFEDS SP operators list.

It would be great if the SPs on the TAC could review and add key points to pique their interest. I'll share when it's ready.

           Janemarie