Attending

Members

• Tom Jordan, University of Wisc - Madison (chair)  
• Jill Gemmill, Clemson  (vice chair)  
• Rob Carter, Duke   
• Matthew Economou, InCommon TAC Representative to CACTI  
• Michael Grady, Unicon  
• Christos Kanellopoulos, GEANT   
• Les LaCroix, Carleton College  
• Chris Phillips, CANARIE   
• Bill Thompson, Lafayette College  

Internet2 

• Ann West   
• Steve Zoppi   
• Nic Roy  
• Jessica Fink  
• Mike Zawacki  
• Emily Eisbruch   

Regrets

• Karen Herrington, Virginia Tech   regrets
• Margaret Cullen, Painless Security 
• Nathan Dors, U Washington  
• Marina Adomeit, SUNET
• Kevin Morooney, Internet2

  Action item review from this CACTI call:

• AI TomJ will send reminder to CACTI to provide feedback to IAM Assessment
• AI TomJ will follow up with Nathan and Rob on WebAuthn blog

 Action item review from Sept 15, 2020 CACTI call:

• AI TomJ - draft a blog update on topics of interest being discussed by CACTI and the community
• AI TomJ - add a few more questions to the proposed packaging/container survey around logs, and Tom will keep CACTI informed
• AI TomJ - Follow up with community member at SUNET on suggestions for CACTI members  
• AI TomJ - summarize the Sept 15 CACTI call discussion around the BEv2 consultation and bring this back to CACTI. If approved, CACTI can provide feedback to the BEv2 consultation 
• AI TomJ and Matthew will reach out to Research Collaboration individuals around serving on CACTI

 Discussion 

COVID status on campuses

• UW Madison, undergrads moved to two weeks of online only instruction to contain COVID
• TomJ can share some COVID dashboard collections 
• Carleton, doing well 85% of undergrads on campus, mix of 4 ways of teaching/learning, COVID dashboard, with very few active cases 
• Lafayette, 600 students on campus, instruction is fully remote, looking at various possible scenarios for spring term
  

Reviving the TIER IAM assessment in the context of TAP and  Collaboration Success Program (CSP) (Erin and Bill)

• InCommon CSP IAM Self-Assessment Fall 2020 Work in Progress  
• Self assessment tool needs updating giving current tools and what CSP is attempting to achieve for schools and community
• The goal is to find out where campuses are now, functionality and with regards to architecture
• Plan to offer this assessment in next Collaboration Success Program (CSP)
• Will allow collection of longitudinal data across the community
• Q: Does InCommon reach out to previous CSP participants to ask them the same set of questions this survey asks?
• A: Jessica: yes Erin and Jessica did this, with outreach to past Collaboration Success Program (CSP) participants  
• We tend to focus on administrative use cases
  • Should we look at the FIM4R work and be sure maturity to support research represented in the survey?
  • Suggestion to have Hannah S and FIM4R team to look at this assessment tool
• Internet2 worked with CARCC (carcc.org) to develop an assessment 
  • This could be a model: CARCC research capabilities model
• Assessment could make a community member aware of one or more helpful tools, for example MidPoint. 
• Note that survey does not ask you what you want to change
• BillT: This survey can potentially help CSP participants figure out what they want to focus on.   The assessment tool is not like a consulting report. It is to help the CSP participants develop their plans.
• Q: how many from a school participate in the CSP?
• A: depends, could be 1 or 2  or could be 8
  • We ask for an organization to provide a combined response to an assessment
• Suggestion: might be helpful to have a pain point (agony score) for each of the maturity issues being assessed,
• What are the top 3 things you’d like to see improved
• Perhaps ask about relationships to service providers
• What do you have in place to deal with non-compliant SPs? 
• Is there an institutional acceptance process for IAM projects?

• BillT: Thanks for the helpful feedback.  Feel free to provide additional input, hope to share with CACTI again in 2 weeks on Oct 13, 2020. 
• AI TomJ will send reminder to CACTI to provide feedback to IAM Assessment

CACTI Membership for 2021

•  Jessica still waiting to hear from two CACTI members on whether they want to renominate
• TomJ will roll off due to additional upcoming  commitments at UW Madison
• Gap-fit to audiences:
• Research
• Standards development organization connections
• Leadership of CACTI for 2020 - process reminder and note that Tom is rotating off
  
  

Quarterly Update to Community

• Volunteers needed to draft a blog  for the quarterly update
• Deadline is October 13, Jessica will move content along to Dean for the Trust and Identity newsletter
  
• Proposed blog topics:
• Federation-cloud bridge, possible collaboration with CSTAAC 
  
  
  • Question of how we will approach this topic, is a blog the right way to move this forward? 
  • Questions of how is this to be run?
  • Some of the same questions as with IDP as a Service. 
  • Good way to start is to get working on defining the issue.
  • Start a prospectus doc to lay out the issue. 
  • Could be a good issue for CAMP or ACAMP.   
• OpenRoaming and eduroam (should discuss this on CACTI call, a workshop is being planned)
• passwordless authn and you (Nathan has volunteered to draft this)
• FastFed (somewhat controversial, perhaps we should keep tracking it internally)  
• Perhaps WebAuthn sign on approach is a good topic, (Rob would like to collaborate with Nathan on this)  Apple embedding FIDO in new releases for Safari. 
  AI TomJ will follow up with Nathan and Rob on WebAuthn blog
  
   
• Discussion:
• InCommon TAC is looking at many of these issues listed above for potential blogs.
• Interested in web authentication, attributes have been a pain point, privacy, FERPA issues, etc. 
• CACTI can play a valuable role in understanding the community’s perceptions around issues like how we package Shib IDP, role of proxies
• Comment: we undervalue that the person authenticating is more than a working email address.  Need to think about how we can leverage that value.  
• MFA  
  • REFEDs MFA can fortify the identity  story on campus.  There is some chicken and egg issue in MFA space
  • Modern authentication, ending password has consequences
  • There are a lack of services consuming MFA authentication
  • Matthew: how can we best communicate to IDP operators the need for MFA? 
  • MFA is key to accreditation in some use cases
  • Suggestion: MFA functionality can be requested as optional as a start. Then proselytize and promote. 
  • It was noted that there is nothing to signal which services require MFA
  • Christos: complex problem there are technical issues.  Issues, Europe is partnering with Erasmus. 
• NIH sent a letter to InCommon supporting InCommon and asking for InCommon to do more and spread the word
• Please attend and promote the TechEx kickoff next week, free registration
  • Internet2 TechEx, Tuesday, Oct. 6 
    
  • https://www.internet2.edu/news-events/events/techextra-2020/

    “Science at the Speed of Infection: NIH Responds to the Pandemic with Academic Researchers," will be presented by Andrea Norris, Chief Information Officer of the National Institutes of Health and Mike Tartakovsky, Chief Information Officer of the National Institute of Allergy and Infectious Diseases and Director Office of Cyber Infrastructure and Computational Biology, and will focus on research challenges in the era of the pandemic. 

    
• Need to support REFEDs R&S, REFEDs Assurance and REFEDs MFA
• There will be a charge to CIOs saying if you want to be a player in pandemic research, you must support these issues
• The community must work out the technology issues
• At CAMP, Nov. 16-20, 2020, the community will talk through the schedule for this work 
   https://incommon.org/academy/camp-meetings/2020-virtual-camp-and-advance-camp/
  
  

Parking Lot

1. (From June 9, 2020 call) TomJ  - Add as an agenda item for a future CACTI call: Operationalizing containers

Next CACTI Meeting: Tuesday, October 13th, 2020