<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Arial" size="2"><span style="font-size:10pt;">
<div>Dear all,</div>
<div>please find below the preliminary notes of our call today. Any error or misunderstanding, please let me know.</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<a name="BM_BEGIN"></a>
<div><u>Participants:</u></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Torsten, John, Siva, Philippe, Nicolas, Celestin, Bjorn,</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"><u>agenda: </u></span></font></div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>status of 3 drafts</li></span></font>
</ul>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><u>Discussion:</u></div>
<div><b>User Questionning API</b></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div>Status of Orange headways:</div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>a draft version 3, on which some exchanges occurred in the last hours. Updates are going on towards a draft version 4</li><li>development of a prototype: first API for UQ up and running, the pull flow is working well</li></span></font>
</ul>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Open questions:</span></font></div>
<ul style="margin:0;padding-left:72pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Possibilities offered to the RP regarding question and answers</li></span></font>
</ul>
<ul style="margin:0;padding-left:108pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>the client is responsible for the wording of the question, and understands the answer of the user</li></span></font>
</ul>
<ul style="margin:0;padding-left:72pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>how much freedom for the client to formulate the question ?</li></span></font>
</ul>
<ul style="margin:0;padding-left:108pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>in the specs, simple to enable a multivalued question in regard of several answers, under the responsibility of the client</li></span></font>
</ul>
<ul style="margin:0;padding-left:72pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Should we and how to address the capabilities of the device to display the question and multiple possible answers ?</li></span></font>
</ul>
<ul style="margin:0;padding-left:108pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>solutions to authenticate the user could not be sufficient for questioning the user </li></span></font>
</ul>
<ul style="margin:0;padding-left:72pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Security: do we separate authentication and security (pin, biometrics…) of the formatting of the question ?</li><li> Are there a unique mecanism for questioning and authenticating ?</li></span></font>
</ul>
<ul style="margin:0;padding-left:108pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>From an authentication point of view, they could be the same</li><li><font face="Wingdings">à</font> implementation considerations to add in the specs regarding components</li></span></font>
</ul>
<ul style="margin:0;padding-left:72pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>qcr and qmr: </li></span></font>
</ul>
<ul style="margin:0;padding-left:108pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>hard to see the difference with acr and amr… </li><li><font face="Wingdings">à</font> give concrete exemples in the specs to illustrate</li></span></font>
</ul>
<ul style="margin:0;padding-left:72pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Is there a multi step exchange between RP and OP to agree on the means to question the user ? No, It should only be a question of features discovering</li><li>Should UQ work with sim applet ? Yes, but with restrictions</li><li>The specs does not take care of the different authenticators of the OP to the user. With UQ: we use sim applet (limited), but the prototype works with SMS URLs</li></span></font>
</ul>
<ul style="margin:0;padding-left:108pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><font face="Wingdings">à</font> Insert these examples into the specs.</li></span></font>
</ul>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Everyone on the list to give a feedback regarding this draft</li></span></font>
</ul>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><b>SIBA specs</b></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">no update at this time</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">DT planned to implement the prototype of SIBA mechanism (server initiated backchannel authentication)</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">John: will be raised in a next OAuth meeting, to fetch potential support. Remaining correlative questions on the device flow</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"><b>OIDF summit</b></span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> coming up next week, before the IIW.</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Bjorn to send on the list a draft version of the status of documents we are working on</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div>Kind regards,</div>
<div>Philippe</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Zeit: Mittwoch, 19. Oktober 2016 16:00-17:00 (UTC+01:00) Amsterdam, Berlin, Bern, Rom, Stockholm, Wien.</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Ort: <a href="https://global.gotomeeting.com/join/927253461"><font color="blue"><u>https://global.gotomeeting.com/join/927253461</u></font></a></span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Hinweis: Die oben angegebene Abweichung von GMT berücksichtigt keine Anpassungen für Sommerzeit.</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">*~*~*~*~*~*~*~*~*~*</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Hi all,</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">please post topic suggestions to the list.</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">I see the following topics for today:</span></font></div>
<ul style="margin:0;padding-left:30pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Status of SIBA, UQ and Migration/Porting</li><li>Decision: Account Migration move vs. link</li><li>Prototypes / Implementers Draft</li><li>Next workshop</li></span></font>
</ul>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">best regards,</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Torsten.</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> << Fichier: ATT00001.txt >> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
</span></font>
<PRE>_________________________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.
</PRE></body>
</html>