CTAB call of September 8, 2020

 Attending

• David Bantz, University of Alaska (chair) 
• Pål Axelsson, SUNET 
• Rachana Ananthakrishnan, Globus, University of Chicago   
• Tom Barton, University Chicago and Internet2, ex-officio 

• Richard Frovarp,  North Dakota State 

• Eric Goodman, UCOP - TAC Representative to CTAB 
• Jon Miner, University of Wisc - Madison 
• John Pfeifer, University of Maryland  
• Marc Wallman, North Dakota State University, InCommon Steering Rep, ex-officio 
• Chris Whalen, Research Data and Communication Technologies 
• Johnny Lasker, Internet2
• Albert Wu, Internet2
• Emily Eisbruch, Internet2 
• Jessica Fink, Internet2
• Dean Woodbeck Internet2

Regrets

• Mary Catherine Martinez, InnoSoft (vice chair)
• Brett Bieber, University of Nebraska 
• Ercan Elibol, Florida Polytech Institute
• Chris Hable, University of Michigan
• Jule Ziegler,  Leibniz Supercomputing Centre
• Robert Zybeck, Portland Community College
• Ann West, Internet2
• Kevin Morooney, Internet2

Discussion

Baseline Expectations V2

• Review announcement message for the consultation 
• Consultation on Baseline Expectations 2.0
  • A few edits were suggested and implemented for the announcement, including making it clearer what community members are being asked to do for the consultation
• Plan to send out the email today to open the consultation (DONE)
• See Blog Here: https://incommon.org/news/feedback-sought-on-baseline-expectations-v2/
• Webinar to introduce BEv2 Consultation - Wed., Sept. 23 at 2pm ET
• This takes place of IAM Online for September
• Hope most of CTAB can join the Wed. Sept. 23 webinar
• Same date as Trusted CI meeting, but it’s OK
• Dean:  calling this a discussion versus a webinar
  

Impact Analysis

• InCommon Operations is doing/planning several steps:
  • Step 1 - one time Qualys scanning and metadata check to establish baseline - for 9/14 InCommon Steering call
  • By Q1 2021 - automated daily tally of adherence stat, similar to those from BE1
  • Hope to aggregate scan results into organizations and correlate the contacts with the scan results
  • Shannon working on a summary update from the entity scanning 
  • Looking at aggregating scores up to the entity level
  • If you get a spread of As and Cs , your score will be C
  • Overall, CTAB says we are good with the Impact analysis as reported by Albert
• FAQ - to be built over the course of consultation - answer frequently asked questions from consultation period, the link to FAQ will get added to the consultation page
  
  
  
• Handling feedback during BEv2 consultation 
• We encourage all feedback  to be made on the Consultation wiki page
  • If a community member comments on BEv2 in the InCommon  participants email list,
    do we ask them to add comment on the community consultation page?
• If we end up needing to transcribe some community comments onto the consultation wiki, we could capture the original comment text in the google doc
  
  
• Suggestion that we wait for consultation to close on October 19 before we start considering the input 
• There are two CTAB calls plus a Sept 23 webinar before the BEv2 Consultation ends on Oct 19
• Need to wrap up by InCommon Steering on Nov. 2
• Dean has developed a communication plan to promote awareness of the consultation, including the Sept 23 webinar and emails

Beyond BE2 - how do we propel the federation to better support research collaboration?

• MFA - signaling and enforcement
• Assurance beyond signaling MFA - REFEDS Assurance?
• Mapping to/from US Federal Government requirements
• make attribute release groups (entity categories) useful?
• A Baseline + type program, e.g., Research Collaboration Ready, where we can specify more focused requirements,  
  
• Comments
  • Can CTAB reach out to top vendors of commercial solutions
  • Would top vendors (OKTA, Microsoft) like to join us for a meeting?
• R&S may need updating  https://refeds.org/research-and-scholarship
• InCommon TAC has talked about subject identifiers and implementation profile
• Another important issue: IDP as a service
• Rachana: to encourage vendors to change their approach, the most effective approach is to get a group of campuses that have contracts with the vendors to reach out and advocate for this
• Albert: IDP as a Service Working Group is fleshing out requirements that a well behaving IDP should have
• This will be helpful as currently for vendors, there is not a precise implementation target to aim for 
• Also  IDP as a Service Working Group is working on connector products
  • Cirrus Identity offers a connector today    (Identity Bridge | Okta, Azure AD, LDAP, Slate) 
  • Others are working on this , including Painless Security
• IDP as a Service Working Group should submit report for review soon

CTAB nominations for 2021   - Jessica

• 4 Members schedules to roll off CTAB at end of 2020 - intention to renominate? Email David, MC, Jessica
  • David Bantz - Planning to renominate
  • Chris Hable
  • Mary-Catherine Martinez
  • Jon Miner - Planning to renominate
• Edits to this year’s Announcement for InCommon Advisory Committee Nominations. Due by September 28th.   CTAB members, Please feel free to edit this.
• Review the Annual Member Cycle for Committees
• Will work to discuss & finalize at the 9/22 CTAB meeting
• As we think about people to nominate, consider the CTAB work coming after BEv2
  
  

Next CTAB call: Tuesday, Sept 22, 2020