<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:13px"><div dir="ltr" style="font-family: 'Helvetica Neue', 'Segoe UI', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65154">Spec call notes 19-Sep-16<br id="yui_3_16_0_1_1474060647630_65155"></div><div style="font-family: 'Helvetica Neue', 'Segoe UI', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65156"><br id="yui_3_16_0_1_1474060647630_65157"></div><div style="font-family: 'Helvetica Neue', 'Segoe UI', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65158">Nat Sakimura<br></div><div dir="ltr" style="font-family: 'Helvetica Neue', 'Segoe UI', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65161">Edmund Jay</div><div dir="ltr" style="font-family: 'Helvetica Neue', 'Segoe UI', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65161">Prateek Mishra</div><div dir="ltr" style="font-family: 'Helvetica Neue', 'Segoe UI', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65161">Rich Levinson</div><div dir="ltr" style="font-family: 'Helvetica Neue', 'Segoe UI', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65162"><br id="yui_3_16_0_1_1474060647630_65163"></div><div dir="ltr" style="font-family: 'Helvetica Neue', 'Segoe UI', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65164"><br id="yui_3_16_0_1_1474060647630_65165"></div><div dir="ltr" id="yui_3_16_0_1_1474060647630_65166"><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65167">Agenda </div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr"> Session and Logout specs</div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr"><br></div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr"><br></div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr"><br></div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr">Prateek and Rich are looking at the session related aspect of OpenID Connect and</div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr">analyzing the distinctions between the ID Token, Session ID, and session lifetimes.</div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr"><br></div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr">They are looking for a "strong logout" solution (strong coupling of sessions between IdP and RP).</div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr"><br></div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr">They are deciding whether any changes and/or change to the language is needed.</div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr"><br id="yui_3_16_0_1_1474060647630_65640"></div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr">Clarification is needed on ID Token lifetime and session lifetime.</div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr"><br></div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr">They are analyzing RP use cases and are finding that some class of RPs desire</div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr">strong logout with IdP.</div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr"><br></div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr">For strong logout implementation, they are looking into what information is needed to </div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr">be conveyed to the RP for session termination.</div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr"><br></div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr">Required information includes session ID, IdP session lifetime (or expiration). </div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr">Session lifetime is needed by some RPs which uses caches to implement flush strategy.</div><div id="yui_3_16_0_1_1474060647630_65168" dir="ltr"><div dir="ltr" id="yui_3_16_0_1_1474060647630_66168"><font face="HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif"><br></font></div><div dir="ltr" id="yui_3_16_0_1_1474060647630_66168"><font face="HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif" id="yui_3_16_0_1_1474060647630_66169">There are many use cases where the RP wants to coordinate sessions with IdP and have strong session logout.</font></div><div dir="ltr" id="yui_3_16_0_1_1474060647630_66170"><font face="HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif" id="yui_3_16_0_1_1474060647630_66171"><br id="yui_3_16_0_1_1474060647630_66172"></font></div><div dir="ltr" id="yui_3_16_0_1_1474060647630_66173"><font face="HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif" id="yui_3_16_0_1_1474060647630_66174">Prateek and Rich will publish an analysis by next Thursday call and solicit community feedback.</font></div></div><div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;" id="yui_3_16_0_1_1474060647630_65168" dir="ltr">
<div style="font-size: 12px; line-height: normal; font-family: Helvetica;" id="yui_3_16_0_1_1474060647630_65544"><br></div><div style="font-size: 12px; line-height: normal; font-family: Helvetica;" id="yui_3_16_0_1_1474060647630_65544"><br></div>
<div style="font-size: 12px; line-height: normal; font-family: Helvetica; min-height: 14px;" dir="ltr" id="yui_3_16_0_1_1474060647630_65582"><br id="yui_3_16_0_1_1474060647630_65583"></div></div></div></div></body></html>