Minutes - February 16, 2017
TAC Members Attending: Tom Barton, Mark Scheible, Tom Mitchell, Eric Goodman, Albert Wu, Janemarie Duh, Keith Wessel, Chris Misra, Steve Carmody, Jim Jokl, Mike Grady
...
Minutes from 2/2/17 were approved via the wiki.
Ops Update
Tom Scavo provided the Ops Update and will pose questions via the TAC email list:
Relaxing requirements on domains in IdP endpoints. Specifically:
Should the domain in the entityID continue to be owned by the IdP operator in all cases?
If requirements are relaxed, how will the endpoint locations be validated (if at all)?
Should all protocol endpoints in SP metadata be HTTPS-protected?
Status of migrating security contacts to the REFEDS format.
Shib Consortium Update
Steve Zoppi provided an update on the Shibboleth Consortium activities. There is a proposed 25% fee increase which received only mild pushback from a couple of members. In addition to this fee increase, the consortium will present a longer-term plan on sustainable funding and attracting new members. Consortium discussions have also included “fair use” and communicating about the need for funding. Our conversations about this will also need to include the need for sustainable funding for InCommon and TIER.
Internet2 Trust and Identity Update
Ann West announced that Internet2 Trust and Identity is posting three jobs: DevOps, Security System Admin, and a Project Manager. These will address some of the key shortcomings addressed in last year’s Ops Review. This is a first step. There are other gaps to fill that are not necessarily technical. More on that to come.
...
Mark Scheible reported that the Per-Entity Metadata Working Group report was accepted by InCommon Steering. InCommon Operations will now develop a plan for architecture, communications, and rollout.
TAC Transparency/Community Involvement
One goal in this area is to make the information about the TAC and its work more available and easier to find.
...
Mike Grady asked if there is a process for designating a federating software as appropriate for use in InCommon (like Shibboleth and Simple SAML are now). CAS version 5 may fit the bill, but is there a way to test or certify that? No such process exists now. Rainer Hoerbe and Roland Hedberg are writing a program that would test against an interoperability profile, to be released as part of FedLab, but that is not yet complete.
TAC DIscussion List
(AI) For the next TAC meeting, there will be a proposal about whether to have an open TAC discussion email list.
TIER Packaging Update
(AI) Mark Scheible will add this to the top of the Information Items for the next meeting