<br><br><div class="gmail_quote">On Wed, Mar 21, 2012 at 4:58 AM, Mike Jones <span dir="ltr"><<a href="mailto:Michael.Jones@microsoft.com">Michael.Jones@microsoft.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal">Spec call notes 19-Mar-12<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Pamela Dingle<u></u><u></u></p>
<p class="MsoNormal">Brian Campbell<u></u><u></u></p>
<p class="MsoNormal">Paul Madsen<u></u><u></u></p>
<p class="MsoNormal">Nat Sakimura<u></u><u></u></p>
<p class="MsoNormal">John Bradley<u></u><u></u></p>
<p class="MsoNormal">George Fletcher<u></u><u></u></p>
<p class="MsoNormal">Edmund Jay<u></u><u></u></p>
<p class="MsoNormal">Mike Jones<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Agenda:<u></u><u></u></p>
<p class="MsoNormal"> New Ping spec sent by Paul Madsen to OAuth list<u></u><u></u></p>
<p class="MsoNormal"> OAuth Rechartering Issues<u></u><u></u></p>
<p class="MsoNormal"> Open Issues<u></u><u></u></p>
<p class="MsoNormal"> Editing<u></u><u></u></p>
<p class="MsoNormal"> Paris week meetings<u></u><u></u></p>
<p class="MsoNormal"> Interop<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">New Ping spec sent by Paul Madsen to OAuth list:<u></u><u></u></p>
<p class="MsoNormal"> ping-oauth-verification-01.txt sent in Paul Madsen's March 15 3:35am (PDT) note to the OAuth list<u></u><u></u></p>
<p class="MsoNormal"> Authorization Server to Resource Server communication<u></u><u></u></p>
<p class="MsoNormal"> Ping has validation endpoint in Ping Federate<u></u><u></u></p>
<p class="MsoNormal"> Resource Server can send token to issuing Authorization Server<u></u><u></u></p>
<p class="MsoNormal"> Get back scopes<u></u><u></u></p>
<p class="MsoNormal"> Relevant attributes to be returned back to Resource Server<u></u><u></u></p>
<p class="MsoNormal"> Architected validation as a grant type<u></u><u></u></p>
<p class="MsoNormal"> An extension to the token endpoint - not a protected resource<u></u><u></u></p>
<p class="MsoNormal"> Ping proprietary, but hoped that would eventually be standardized<u></u><u></u></p>
<p class="MsoNormal"> Paul Madsen sent spec draft to OAuth list to describe what is done in Ping Federate product<u></u><u></u></p>
<p class="MsoNormal"> Paul sent spec to indicate Ping's interest in an eventual standard<u></u><u></u></p>
<p class="MsoNormal"> They recognize that any eventual standard will have differences<u></u><u></u></p>
<p class="MsoNormal"> Intended to fill in gaps in the OAuth specs needed for their deployments<u></u><u></u></p>
<p class="MsoNormal"> George Fletcher's YATVE (Yet Another Token Validation endpoint) has similar properties</p></div></div></blockquote><div><br></div><div>YATVE uses different token validation endpoint, which is an OAuth bearer protected resource, than overloading the token endpoint. The response is just uid for the performance optimization reason. </div>
<div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"> Brian is turning his attention to OpenID Connect<u></u><u></u></p>
<p class="MsoNormal"> Will be at Sunday meeting<u></u><u></u></p>
<p class="MsoNormal"> Will be in London<u></u><u></u></p>
<p class="MsoNormal"> Travis Spencer doing SCIM work and will be at the IETF meetings<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"> We agree that SWD and this are more important than Use Cases and the Dynamic Registration proposal<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">OAuth Rechartering Issues:<u></u><u></u></p>
<p class="MsoNormal"> SWD should replace use cases (normative taking precedence over non-normative)<u></u><u></u></p>
<p class="MsoNormal"> Proposed Dynamic client registration spec not enough like Connect Registration spec<u></u><u></u></p>
<p class="MsoNormal"> Taking a dependence in Connect would randomize the completion schedule<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Open Issues:<u></u><u></u></p>
<p class="MsoNormal"> Same open issues as at the end of Thursday's call<u></u><u></u></p>
<p class="MsoNormal"> We have 39 issues on hold<u></u><u></u></p>
<p class="MsoNormal"> We should review these on Thursday as our primary agenda items<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Editing:<u></u><u></u></p>
<p class="MsoNormal"> John and Nat have had to spend time working on a US government OAuth profile<u></u><u></u></p>
<p class="MsoNormal"> ICANN - with extensions for SSO</p></div></div></blockquote><div><br></div><div>I am not involved in it. </div><div>I think it is ICAM, not ICANN. </div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><u></u><u></u></p>
<p class="MsoNormal"> John plans to finish his Connect edits by Thursday (before boarding a plane to Paris)<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Paris Week Meetings:<u></u><u></u></p>
<p class="MsoNormal"> Sunday OpenID Session<u></u><u></u></p>
<p class="MsoNormal"> Tuesday Internet Society<u></u><u></u></p>
<p class="MsoNormal"> Tuesday JOSE<u></u><u></u></p>
<p class="MsoNormal"> Wednesday London OpenID Meeting<u></u><u></u></p>
<p class="MsoNormal"> Thursday W3C<u></u><u></u></p>
<p class="MsoNormal"> Thursday OAuth<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Interop:<u></u><u></u></p>
<p class="MsoNormal"> More interop results keep coming in<u></u><u></u></p>
<p class="MsoNormal"> Nat persuaded NRI to participate<u></u><u></u></p>
<p class="MsoNormal"> Roland will be in Paris, but not on Sunday<u></u><u></u></p>
<p class="MsoNormal"> In Paris, we will analyze the interop results<u></u><u></u></p>
</div>
</div>
<br>_______________________________________________<br>
Openid-specs-ab mailing list<br>
<a href="mailto:Openid-specs-ab@lists.openid.net">Openid-specs-ab@lists.openid.net</a><br>
<a href="http://lists.openid.net/mailman/listinfo/openid-specs-ab" target="_blank">http://lists.openid.net/mailman/listinfo/openid-specs-ab</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Nat Sakimura (=nat)<div>Chairman, OpenID Foundation<br><a href="http://nat.sakimura.org/" target="_blank">http://nat.sakimura.org/</a><br>@_nat_en</div><br>