<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>Hi guys,</div>
<div><br>
</div>
<div>I have just updated the so-called “Server Initiation” document: <a href="https://bitbucket.org/openid/mobile/src/75eae8b8e50737059c069965c8c37e794843b510/draft-mobile-client-initiated-backchannel-authentication-01.html?at=default&fileviewer=file-view-default">https://bitbucket.org/openid/mobile/src/75eae8b8e50737059c069965c8c37e794843b510/draft-mobile-client-initiated-backchannel-authentication-01.html?at=default&fileviewer=file-view-default</a></div>
<div><br>
</div>
<ul>
<li>Since now the flow is called “Client Initiated Backendchannel Authentication”</li><li>Some new sections and non-normative examples have been added.</li></ul>
<div>The current document is still keeping the “auth_req_id” to correlate the request and the asynchronous response through the redirect_uri. However if you remember the Florian’s proposal to use a dynamic path in the redirect_uri (building this path with a
unique identifier that identifies the request uniquely) is under discussion, I personally consider it could be a good solution too.</div>
<div><br>
</div>
<div><br>
</div>
<div>Thanks a lot in advance,</div>
<div>Gonza.</div>
<div>
<div id="MAC_OUTLOOK_SIGNATURE"></div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Openid-specs-mobile-profile <<a href="mailto:openid-specs-mobile-profile-bounces@lists.openid.net">openid-specs-mobile-profile-bounces@lists.openid.net</a>> on behalf of "<a href="mailto:Torsten.Lodderstedt@telekom.de">Torsten.Lodderstedt@telekom.de</a>"
<<a href="mailto:Torsten.Lodderstedt@telekom.de">Torsten.Lodderstedt@telekom.de</a>><br>
<span style="font-weight:bold">Date: </span>jueves, 11 de agosto de 2016, 12:15<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:openid-specs-mobile-profile@lists.openid.net">openid-specs-mobile-profile@lists.openid.net</a>" <<a href="mailto:openid-specs-mobile-profile@lists.openid.net">openid-specs-mobile-profile@lists.openid.net</a>><br>
<span style="font-weight:bold">Subject: </span>[Openid-specs-mobile-profile] Preliminary minutes of MODRNA WG Call on August 10th 2016<br>
</div>
<div><br>
</div>
<span style="mso-bookmark:_MailOriginalBody">
<div>
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">
<div>Hi all,</div>
<div> </div>
<div>please find below the draft of the WG Call minutes.</div>
<div> </div>
<div>Best regards,</div>
<div>Torsten.</div>
<div> </div>
<div>Participants: John Bradley, Venkatasivakumar Boyalakuntla (Siva), James Manger, Bjorn Hjelm, Florian Walter, Jörg Connotte, Nat Sakimura, Gonzalo Fernandez Rodriguez, Ijaz Khan, Torsten Lodderstedt</div>
<div> </div>
<div>Status of our high-prio drafts:</div>
<ol style="margin:0;padding-left:36pt;">
<li>Server-initiated authentication </li></ol>
<ul style="margin:0;padding-left:54pt;">
<li>Gonzalo and Florian presented the first draft (<a href="https://bitbucket.org/openid/mobile/raw/75ca37860ae1fe90b085d32ad88507e82e2f374f/draft-mobile-server-initiation-01.txt"><font color="blue"><u>https://bitbucket.org/openid/mobile/raw/75ca37860ae1fe90b085d32ad88507e82e2f374f/draft-mobile-server-initiation-01.txt</u></font></a>)
</li><li>All WG members are asked to review it and give feedback on the list </li></ul>
<ol start="2" style="margin:0;padding-left:36pt;">
<li>Account migration </li></ol>
<ul style="margin:0;padding-left:54pt;">
<li>James Manger explained an alternative proposal for handling of migration data. The basic idea is to instead of transferring it via a signed JWT, the old OP exposes an endpoint where the RP can directly call and determine whether and where a particular account
has been migrated to</li><li>The RP should be able to authenticate with the old OP since it is a RP of this OP as well (since it uses the old OP for logins)</li><li>pro: no issue regarding signing key expiration</li><li>James will post a more detailed description on the list so we can have a discussion of which way to go</li></ul>
<ol start="3" style="margin:0;padding-left:36pt;">
<li>Attributes UserInfo/PremiumInfo</li></ol>
<div style="padding-left:54pt;">- Siva presented current list</div>
<div style="padding-left:54pt;">- WG members gave feedback and advice on how to incorporate Mobile Connect specific claims into OIDC (UserInfo and ID Token) by constructing collision resistant claim names</div>
<div style="padding-left:54pt;">- Siva takes this back to CPAS</div>
<div> </div>
<div>Status Workshop</div>
<ul style="margin:0;padding-left:54pt;">
<li>Eventbrite event has been set up and will be distributed soon</li><li>No further information on location and logistics since Philippe did not attend the call</li></ul>
<div> </div>
<div> </div>
<div> </div>
<div><font face="Arial" size="1"><span style="font-size:8pt;"><span style="text-transform:uppercase;"><b>Deutsche Telekom AG</b></span></span></font></div>
<div><font face="TeleGrotesk Headline" size="2" color="#E20074"><span style="font-size:9pt;"><span style="text-transform:uppercase;">Group
</span><font face="TeleGrotesk Headline Ultra"><span style="text-transform:uppercase;"><b>Innovation</b></span></font><font face="TeleGrotesk Headline Ultra" size="1"><span style="font-size:6pt;text-transform:uppercase;"><b><sup>+</sup></b></span></font><font face="Arial" size="1" color="black"><span style="font-size:8pt;"></span></font><font face="Arial" size="1" color="black"><span style="font-size:8pt;">/
Products & Innovation</span></font></span></font></div>
<div><font face="Arial" size="1"><span style="font-size:8pt;">Dr.-Ing. Torsten Lodderstedt</span></font></div>
<div><font face="Arial" size="1"><span style="font-size:8pt;">Leiter Enabling Platforms / Technology</span></font></div>
<div><font face="Arial" size="1"><span style="font-size:8pt;">T-Online Allee 1, 64295 Darmstadt, Germany</span></font></div>
<div><font face="Arial" size="1"><span style="font-size:8pt;">+49 6151 5837619 (Phone)</span></font></div>
<div><font face="Arial" size="1"><span style="font-size:8pt;">E-Mail: <a href="mailto:t.lodderstedt@telekom.de">
<font color="blue"><u>torsten.lodderstedt@telekom.de</u></font></a> </span></font></div>
<div><a href="http://www.telekom.com/"><font face="Arial" size="1" color="blue"><span style="font-size:8pt;"><u>www.telekom.com</u></span></font></a><font face="Arial" size="1"><span style="font-size:8pt;"></span></font></div>
<div><font size="1"><span style="font-size:8pt;"> </span></font></div>
<div><font face="Arial" size="2" color="#E20074"><span style="font-size:10pt;"><span style="text-transform:uppercase;"><b>Life is for sharing.</b></span><font face="Calibri" color="black"><span style="text-transform:uppercase;"><b> </b></span></font><font color="black"><span style="text-transform:uppercase;"><b></b></span></font></span></font></div>
<div><font size="1"><span style="font-size:8pt;"> </span></font></div>
<div><font face="Arial" size="1"><span style="font-size:8pt;">You can find the obligatory information on
<a href="http://www.telekom.com/compulsory-statement"><u>www.telekom.com/compulsory-statement</u></a></span></font></div>
<div><font size="1"><span style="font-size:8pt;"> </span></font></div>
<div><font face="Arial" size="1"><span style="font-size:8pt;"><span style="text-transform:uppercase;"><b>Big changes start small – conserve resources by not printing every e-mail.</b></span></span></font></div>
<div> </div>
<div> </div>
<div> </div>
</span></font></div>
</div>
</span></span><br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, puede contener información privilegiada o confidencial y es para uso exclusivo de la persona o entidad de destino. Si no es usted. el destinatario indicado, queda notificado de que la
lectura, utilización, divulgación y/o copia sin autorización puede estar prohibida en virtud de la legislación vigente. Si ha recibido este mensaje por error, le rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a su destrucción.<br>
<br>
The information contained in this transmission is privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, do not read it. Please immediately reply to the sender that you have received this communication in error and then delete it.<br>
<br>
Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário, pode conter informação privilegiada ou confidencial e é para uso exclusivo da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário indicado, fica notificado de que a
leitura, utilização, divulgação e/ou cópia sem autorização pode estar proibida em virtude da legislação vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mesma via e proceda a sua destruição<br>
</font>
</body>
</html>