InCommon published public review draft versions of its 1.1 Assurance Framework and Profiles documents on March 9.  On this page we describe the major changes in these documents from the 1.0.x versions, and suggest particular sections reviewers should look at.

Overall approach

The work of the Refinement team had these objectives:

  1. Respond to feedback from early-adopter campuses regarding provisions that were unclear or onerous.
  2. Remove elements that were not justified by US government or InCommon community requirements.
  3. Harmonize conflicting and out-of-date terminology.
  4. Continue to meet requirements of US government ICAM program for Assurance Levels 1 and 2 (Bronze and Silver).
  5. Clarify the purpose and audience of each document.
  6. Clearly indicate normative requirements.  Remove or appropriately distinguish examples and advice.

IAAF

Section 2, "Identity Management Functional Model", is new.  It is intended to clearly define many terms used in Assurance Profiles, in the context of identity management systems typically used by InCommon participants.  This section replaces the 1.0 Glossary.

...

IAP

4.2.1:  Almost all criteria from this section have been removed.  The removed criteria were called out as burdensome by early adopters, and were no longer required by US government specs.