TAC Meeting 2017-04-13
Thursday, April 13, 2017
1:00pm ET | 12:00pm CT | 11:00am MT | 10:00am PT
Connection Information
...
Pre-Read Materials
We are switching to BlueJeans for this call, please make sure you have a BlueJeans client installed, or can dial in via phone
Review any action items for you, documented below, and make sure you complete them or update status appropriately
Read the TAC work plan finalization document and indicate your +1 approvals to the projects in the linked spreadsheet
Check yourself into the running minutes attendance list
Review/approve TAC minutes from 03/30/2017 call [DONE]
Review Ops Update
Agenda
...
Minutes
...
NOTE WELL: All Internet2 activities are governed by the Internet2 Intellectual Property Framework
Information items
Ops Update 2017-04-13 (Tom S) (10 min)
T&I update - projects (Nick/Ann) (3 min)
Attribute Release Roadmap (Ann)
Shibboleth Consortium Update (Kevin)
Information only: InCommon Software Development/DevOps roadmap for next 6 months, very likely to change
HTTPS endpoints discussion (Tom S) (15 min)
Notes: HTTPS-protected Endpoints
Review next steps for 2017 projects - descriptions of each project, chartering, what venue/approach for each item/etc. (30 min)
Announcement of new Working Groups - Technical-Discuss or Participants List? (probably both, use as a reminder of the existence of the technical discuss list)
- Set deadline for WG Charters to be submitted for review - proposed Friday, April 28th
Minutes
TAC Members Attending: Mark Scheible, Janemarie Duh, Keith Wessel, Albert Wu, Eric Goodman, Kim Milford, Tom Barton, Chris Misra (following online notes only)
With: Ian Young, David Walker, Nick Roy, IJ Kim, Dean Woodbeck, Steve Olshansky, Kevin Morooney, Tom Scavo, Paul Caskey
Uncompleted AIs from past calls
(AI) TAC members are asked to review the document regarding TIER and potential changes to Shibboleth and see if there is anything that should be added.
...
(AI) Mark Scheible and Ann West will develop an executive summary of the OIDC Survey WG report and recommendations for the InCommon Steering Committee.
Action Items from this call
(AI) ??? (someone) will send a note to technical-discuss kicking off a discussion about requiring HTTPS endpoints for SPs
...
(AI) Mark/Nick will start a discussion on the technical-discuss list about the Discovery 2.0 work plan item. Perhaps focus the discussion on use cases with a goal of a REFEDS discussion at TechEx.
Ops Update
Domains in Endpoint Locations - As of Monday, April 10, the InCommon RA is no longer validating domains in endpoint locations in metadata. This includes the domains in the endpoint locations in both SP and IdP metadata. Tom Scavo sent a message to inc-ops-notifications on April 7 and has received no feedback from site admins one way or the other.
...
HTTP Compression - We are supporting HTTP compression on md.incommon.org and sent a message to that effect on April 5. This has been deployed on the preview aggregate and the IdP-only aggregate so far, and will be deployed on the main and export aggregates on April 18. Deployment to the fallback aggregate TBD.
Trust and Identity updates
Nick shared the InCommon Software Development/DevOps roadmap for next 6 months. The first set of changes will face the RA staff, then move to the community-facing pages
Shibboleth Consortium (Kevin) - Justin Knight and Kevin presented a webinar about the state of the consortium. 55-60 total attendees over the two webinars. This is a first step in raising awareness of the status of a process of a consistent cadence of communications from the consortium board. HEAnet has indicated that if their managed IdM service takes off, they intend to become a principal member in 2018. Will turn what was a closed meeting for the Shib board at the Global Summit into a public meeting.
Attribute Release Roadmap - DRAFT - Ann presented this to Steering and is looking for comments/review from TAC. This will likely be fodder for an Attribute Release working group, as well.
HTTPS endpoint discussion
See the notes from the operations advisory group discussion: https://spaces.at.internet2.edu/x/SYWTBg
The current policy is that endpoints in IdP metadata shall be HTTPS-protected. This includes metadata imported from eduGAIN. The proposal is that all SP endpoints also be HTTPS-protected. Almost all SPs imported from eduGAIN are already protected. Tom has talked to a few site admins who say they would be willing to make this change.
...
Next step - Let people consider this and bring it up again at the next TAC meeting. We need to have a good story (accurate and with desired end results) before taking this to the community for feedback. Also in the next two weeks start a discussion on the technical-discuss email list.
2017 TAC Work Plan
...
OIDC/OAuth - Steve Carmody has drafted a proposed charter for an OIDC/Oauth Working Group. He will be sending it to the TAC for review shortly.
...
Question - how will we determine the sequencing of the working groups? How many WGs can be simultaneous (also keeping in mind that a lot of people are working on TIER WGs right now)? It is likely that the WG requests will target different groups of people.
Next Meeting - Monday, April 24 - 8 am (F2F at Global Summit)