[Openid-specs-ab] A/B Connect Atlantic Call Notes 09/01/2025

[Michael Fraser]

A/B Connect Atlantic Call Meeting Notes
9th January 2025

Attendance:
                Mike Jones
                Joseph Heenan
                Stefan Santesson
                Dick Hardt
                Aaron Parecki
                Bjorn Hjelm
                Brian Campbell
                Filip Skokan
                George Fletcher
                Giuseppe De Marco
                Henna Kapur
                Lukasz Jaromin
                Marcus Almgren
                Matthew Micheaux
                Michael Fraser
                Roland Hedberg
                Tim Cappelli
                Vladimir Dzhuvinov

- Mike Jones proposed an agenda prior to the call: https://lists.openid.net/pipermail/openid-specs-ab/2025-January/010541.html

- Introductions were made

- Upcoming events
                - FIDO Member Plenary (Melbourne, Australia | 4th February -> 6th February)
                                - https://fidoalliance.org/event/fido-member-plenary-in-melbourne-australia/

                - FIDO Alliance Seminar (Melbourne, Australia | 7th February)
                                - https://fidoalliance.org/event/fido-alliance-melbourne-seminar-2025/

                - OAuth Security Workshop (Reykjavik, Iceland | 26th February -> 28th February)
                                - https://oauth.secworkshop.events/osw2025

                - IETF 122 (Bangkok, Thailand | 15th March -> 21st March)
                                - https://www.ietf.org/meeting/122/

                - International Workshop on Trends in Digital Identity (Bologna, Italy | 3rd February)
                                - https://www.fbk.eu/it/event/30707/3rd-international-workshop-on-trends-in-digital-identity-tdi-2025/

- OpenID for Verifiable Presentations
                - https://openid.net/third-openid4vp-implementers-draft-approved/
                - Third implementer's draft approved
                - Active call for adoption by DCP WG

- Reminder over new working group call cadence
                - Alternating Mondays for Pacific call @3pm PT
                - Every Thursday for Atlantic call

- OpenID Federation Certification
                - Mike Jones proposed a new set of tests
                                - https://lists.openid.net/pipermail/openid-specs-ab/2025-January/010538.html

                                - new tests are primarily for automatic & explicit registration flows

                                - three classes of tests
                                                - one to inspect a single specific entity

                                                - one to walk Federation graph and inspect an entire Federation
                                                                - Marcus Almgren noted this gets out of hand very quickly with huge amounts of conformance tool log data so mitigations have been made focusing on keeping the details for failures

                                                - one to inspect an entity within a Federation intended for test purposes

                                                - Joseph Heenan noted that one of the identified test "classes" needs to be identified as bringing most value and subsequently focussed on

                                - Discussion was had over tests that test a whole Federation and how it can conceptually change the tests away from testing just what a specific invoker of a test may control
                                                - Marcus Almgren noted that some Federation deployments encountered have slightly different implementations with their own extensions to the core specification

- Dick Hardt proposed some new work
                - Draft from Dick Hardt and Karl McGuinness

                - OpenID Provider Commands
                                - Mike Jones provided guidance on how to get a draft adopted by a working group and advised authors to contribute the text to the mailing list for working group review

- George Fletcher Native SSO
                - https://bitbucket.org/openid/connect/pull-requests/744
                - current draft updated to address all open issues
                - once current work merged, draft 07 to be published
                - larger discussion required on next moves for the work
                - Vladimir Dzhuvinov review requested as an implementor
                - Mike Jones and Bjorn Hjelm committed to reviews

- Federation Core
                - https://github.com/openid/federation/pull/171
                                - clarifies logos for Trust Marks
                                - further reviews requested from working group

                - Stefan Santesson noted that one of the biggest challenges is selling the specification to new adopters
                                - noted that OpenID Federation attempts todo too much at once and suggests that the specification should be split up with profiles for how this interacts with different protocols
                                - Mike Jones (minus chair hat) commented that the specification as-is doesn't require the implementation of the OpenID Connect portion to be implemented and the trust establishment & metadata resolution is still implementable without
                                - Lukasz Jaromin voiced opinion on keeping the current document as-is due to late stage of the specification

                - Vladimir Dzhuvinov
                                - front of agenda next week due to time limitations
                                - Vladimir Dzhuvinov in favour of Gabriel Zachmann metadata pr
                                                - https://github.com/openid/federation/pull/112

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-ab/attachments/20250109/80641cfb/attachment-0001.htm>