Minutes

Attending: Mark Rank, Heather Flanagan, Janemarie Duh, Keith Wessel, Eric Goodman, Mark Rank, Mary McKee, Matthew Brookover, Matthew Economou, Steven Premeau

With (Also Starring): David Walker, Les LaCroix, Albert Wu, David Bantz, IJ Kim, Ann West, Steve Zoppi

Regrets: Judith Bush

Status Updates

TAC nominations

  • The deadline has been moved back to 11/2
  • We currently have three nominations for TAC membership.
  • There will be three open seats for next year (to maintain current 10; could go to 13)
  • We’ll discuss candidates in the next TAC meeting (on 11/4).

Federation Testing Group

  • We have a number of interested participants now. (See the Fed Test WG Update.) Janemarie would like to designate a new sponsor for next year (since she is not renewing her TAC membership for next year).
  • It’s not necessary, but past groups have benefited from having a TAC member as a co-chair.

Reminder: It’s October. Time to revisit the Discovery Service conversation 

CAMP/ACAMP readout - what did we learn on our CAMP-ing vacation?

  • Eric Goodman mentioned conversations about proxies. In general, people question their impact on trust.
    • People tend to put new services behind existing proxies to avoid the overhead of dealing with IdPs for attribute release, etc.
    • It seemed that a lot of this questioning is based on observed behavior of local institutional SPs, rather than necessarily observed federation behavior.
    • Mark Rank: Some guidelines for proxy operators would be useful.
    • ACAMP discussion: https://docs.google.com/document/d/1CTY9cMKgd-G7wbg9Q3RKbIpAWg9G2_enHTk3yHnU_7s/edit
      • There were several others.
    • Primary issue is multiple services behind a single proxy.
      • Multiple applications that comprise a single service behind a single proxy (or a single SP) isn’t really a problem.
    • The VO (e.g., LIGO) architecture described in AARC is proxy-based.
    • Should this be a candidate for next year’s work plan?
      • We should consider this.
      • Maybe describe how to address multiple use scenarios for proxies (e.g., Azure identity service) that don’t involve abandoning Shib (or Azure)
      • Partner with CACTI?
    • Mark and Mary mentioned that the decisions about Shib vs. Azure vs. Okta are business decisions, not technical.
  • It’s often the case that it’s not appropriate for all of a person’s identities (e.g., social IDs) to be linked for all services.

(if time permits) IdP Migration Best Practices / SP Use of IdP Entity ID

  • There wasn't time.

EMail Updates

International, SeamlessAccess, and Browser Updates


Subject:[TAC-InC] International, SeamlessAccess, and Browser Updates - 21 Octobe 2021
Date:Thu, 21 Oct 2021 07:44:10 -0700
From:Heather Flanagan


International Update
TNC22 (13-17 June 2021, Trieste, Italy)
The Call for Proposals is open until 30 November 2021 for sessions, and until 15 February for demonstrations. Have a great idea? Please submit it! https://connect.geant.org/2021/10/12/tnc22-call-for-proposals-is-now-open

REFEDS 
The REFEDS meeting generated excellent discussion, and Nicole Harris captured a summary in a blog post. A link to a recording of the meeting is included in that post.

Open Consultations

Recently Closed Consultations

Microsoft Higher Ed Conference
The Microsoft HiEd 2021 conference happened this week. Recordings are available and include Heather Flanagan and Pamela Dingle as keynote speakers discussing the "Future of Identity." More information is available here: http://microsoft-hied.org/Agenda/agenda2021

Authenticate Conference
This week also saw the Authenticate conference, organized by the FIDO Alliance, happening in Seattle and online. Microsoft's new passwordless option for commercial customers featured heavily. It is a conference worth watching.

SeamlessAccess
The product roadmap is always available to the public: https://seamlessaccess.org/services/

Browser Interactions
There are many proposals in development for how to handle different aspects of the privacy + browser problem. Heather Flanagan is going to organize another flash Mob event to discuss each, but to summarize:

  • First Party Sets - https://github.com/privacycg/first-party-sets
    • a mechanism to allow organizations to each declare their own list of domains, to allow user identity to span related origins
  • CHIPS (Cookies Having Independent Partitioned State) - https://github.com/WICG/CHIPS
    • a mechanism to indicate to user agents that these cross-site cookies should only be available in the same top-level context (top-level site or that site's First-Party Set if it has one) that the cookie was created in
  • Storage Access API - https://github.com/privacycg/storage-access
    • provides a means for authenticated cross-site embeds to check their blocking status and request access to storage if they are blocked
  • Login Status API (was isLoggedIn) - https://github.com/privacycg/is-logged-in
    • inform the browser of the login "state"
  • Federated Credential Management API (was WebID) - https://github.com/WICG/FedCM
    • solving for death of third-party cookies specifically in the context of federated identity

Fed Test WG Update


Subject:[TAC-InC] Fed Test WG Update 2021-10-21
Date:Thu, 21 Oct 2021 11:03:29 -0400
From:Janemarie Duh


Time does fly.

As you have seen, the announcement went out to the participants and educause IAM lists. This resulted in only two new list members plus Judith. That puts the list at 12 members, but three are us:

awu@interent2.edu -  - standard (direct reception)
bjorn@sunet.se - Björn Mattsson - standard (direct reception)
bushj@oclc.org - Judith Bush - standard (direct reception)
kristi.wall@uga.edu - Kristi Wall - standard (direct reception)
lee@keyvoms.org - Craig Lee - standard (direct reception)
nroy@internet2.edu - Nic Roy - standard (direct reception)
onyemaechi.nwokolo@lsuhs.edu - Onyema Nwokolo - standard (direct reception)
roland@catalogix.se - Roland Hedberg - standard (direct reception)
rwood@infoedglobal.com - Roger Wood - standard (direct reception)
tammar.ajam@cerner.com - [Tammar] [Ajam] - standard (direct reception)
tzeller@sphericalcowgroup.com - Tom Zeller - standard (direct reception)
vsowmya@udel.edu - [Sowmya] [Shankar] - standard (direct reception)

So, we are back to asking the question, does this group have enough air under its wings for takeoff? It's got Roland and Tom Zeller. I only know one other person. The membership is very low on people from .edus.

I am comfortable with nine members. The important question for me is, will any of them step up to be the co-chairs? I can pose the question to the list asking and see what the response is.

      Janemarie

Federation 2.0


Subject:[TAC-InC] Fed2.0 and probable absence
Date:Thu, 21 Oct 2021 15:12:31 +0000
From:Bush,Judith


Fed 2.0 is in consultation, we welcome your thoughts - https://wiki.refeds.org/display/CON/Consultation+-+Federation+2.0+Report

I’m hoping to attend, or attend and multitask, but may need to get a document wrapped up before an afternoon meeting.

  • No labels