<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Andrew Hughes</span><br>
</div>
<div dir="ltr">
<div id="x_appendonsend"><font face="Calibri, sans-serif"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Dmitri Zagidulin</span></font></div>
<div id="x_appendonsend"><font face="Calibri, sans-serif"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Anthony Nadalin</span></font></div>
<div id="x_appendonsend"><font face="Calibri, sans-serif"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Mi</span></font><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">chael Barrett</span></div>
<div id="x_appendonsend"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Tom Jones</span></div>
<div id="x_appendonsend"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Juan Caballero </span></div>
<div id="x_appendonsend"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">David Waite</span></div>
<div id="x_appendonsend"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Jeremie Miller</span></div>
<div id="x_appendonsend"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Pamela Dingle</span></div>
<div id="x_appendonsend"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Kristina Yasuda</span></div>
<div id="x_appendonsend"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Edmund Jay</span></div>
<div id="x_appendonsend"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Dima Postnikov</span></div>
<div id="x_appendonsend"><font face="Calibri, sans-serif"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Regrets: Mike Jones</span></font></div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div lang="JA" style="word-wrap:break-word">
<p class="x_x_x_x_x_x_x_x_x_x_x_x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0mm; font-size:12pt; font-family:SimSun; background:white">
<span lang="EN-US" style="font-family:Calibri,sans-serif; color:black; background:white; font-size:12pt"><br>
</span></p>
<p class="x_x_x_x_x_x_x_x_x_x_x_x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0mm; font-size:12pt; font-family:SimSun; background:white">
<span style="color: black; font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">- IPR reminder/recording</span><br>
</p>
<p class="x_x_x_x_x_x_x_x_x_x_x_x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0mm; font-size:12pt; font-family:SimSun; background:white">
<span lang="EN-US" style="font-family: Calibri, Helvetica, sans-serif; color: black; font-size: 12pt;">- Introductions/re-introductions</span></p>
<p class="x_x_x_x_x_x_x_x_x_x_x_x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0mm; font-size:12pt; font-family:SimSun; background:white">
</p>
<ul>
<li><span lang="EN-US" style="font-family: Calibri, Helvetica, sans-serif; color: black; font-size: 12pt;">Juan Cabarello from Spruce Systems</span></li><li><span lang="EN-US" style="font-family: Calibri, Helvetica, sans-serif; color: black; font-size: 12pt;">Andrew Hughes, Ping Identity</span></li></ul>
<p></p>
<p class="x_x_x_x_x_x_x_x_x_x_x_x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0mm; font-size:12pt; font-family:SimSun; background:white">
<span lang="EN-US" style="font-family: Calibri, Helvetica, sans-serif; color: black; font-size: 12pt;">- </span><span lang="EN-US" style="font-family:"Calibri",sans-serif; color:black"><span class="x_x_x_x_x_x_x_x_x_x_x_x_marka6v39w0tx" style="font-size: 12pt; font-family: Calibri, Helvetica, sans-serif;">Agenda</span></span><span lang="EN-US" style="font-family: Calibri, Helvetica, sans-serif; color: black; font-size: 12pt;"> adopted</span></p>
<p class="x_x_x_x_x_x_x_x_x_x_x_x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0mm; font-size:12pt; font-family:SimSun; background:white">
<span lang="EN-US" style="font-family: Calibri, Helvetica, sans-serif; color: black; font-size: 12pt;">- Events/External orgs</span></p>
<p style="margin: 0mm; background-image: initial; background-position: initial; background-size: initial; background-repeat: initial; background-attachment: initial; background-origin: initial; background-clip: initial;">
</p>
<ul style="">
<li style=""><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">An OSS library for SIOP v2/OIDC4V by Sphereon/Gimly: </span><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><a href="https://github.com/Sphereon-Opensource/did-auth-siop" id="LPlnk"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">https://github.com/Sphereon-Opensource/did-auth-siop</span></a></span></li><li style=""><span lang="EN-US" style="color: black; font-size: 12pt; font-family: Calibri, Helvetica, sans-serif;">How Sphereon's SIOP experiments support the "ESSIF-LAB stack": </span><a href="https://github.com/Sphereon-Opensource/essifi-deliverables/blob/da429b54ed03f1e4834dc53f62e04e4fb0b2c90c/interoperability/envisioned_interoperability_with_others.md" id="LPlnk"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">https://github.com/Sphereon-Opensource/essifi-deliverables/blob/da429b54ed03f1e4834dc53f62e04e4fb0b2c90c/interoperability/envisioned_interoperability_with_others.md</span></a><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;"> </span></li><li style=""><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">DIF is trying to figure out how to frame and support ongoing work on the interop profile for said stack; the straw man for it is here: </span><a href="https://essif-lab.eu/verifier-universal-interface-by-gataca-espana-s-l/" id="LPlnk"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">https://essif-lab.eu/verifier-universal-interface-by-gataca-espana-s-l/</span></a></li><li style=""><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Recording of the implementation demo: </span><a href="https://www.loom.com/share/d49e005bb32349d7950022e83d55b944" id="LPlnk"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">https://www.loom.com/share/d49e005bb32349d7950022e83d55b944</span></a></li></ul>
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px">
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0mm; background-image:initial; background-position:initial; background-size:initial; background-repeat:initial; background-attachment:initial; background-origin:initial; background-clip:initial">
</p>
<div><span lang="EN-US" style=""></span></div>
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
</p>
<p style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px">
</p>
<div></div>
<div><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">- PRs</span></div>
<div>
<ul>
<li><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbitbucket.org%2Fopenid%2Fconnect%2Fpull-requests%2F&data=04%7C01%7CKristina.Yasuda%40microsoft.com%7Ce1171353e47a4e1a1a0c08d983d93ebf%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637685792432549677%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=tpkG2lX0kKgtbijFnsnQiqyioAiZ4N%2FE%2FoZzZPjof5k%3D&reserved=0" originalsrc="https://bitbucket.org/openid/connect/pull-requests/" shash="Xoq69z2AMwM+jMLc8xNLt7jqd3LJVgKnT+yL88Vi4L2JzFLx1P0vNjqlwTJIiL774zrawVaS8y55uaQGIQ7O5MpJjHL2ZTO/KqTwof7UvCdMgdoWVBIAMp6y2cXshgHl4jFcscRqtd/fdpPi8gEbQkFAJ5hbBgpFf0TYVSTuGJ4=" id="LPlnk576968" style="font-size:12pt; font-family:Calibri,sans-serif"><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">https://bitbucket.org/openid/connect/pull-requests/</span></a></li><ul>
<li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">PR #50 response-as-push has been updated (firewall issue to be discussed)</span></li><ul>
<li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">we agreed to add a clarifying text that for cross-device SIOP, RP needs to expose a public endpoint. This is not an issue for the same device SIOP where redirect works.</span><br>
</li><li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Jeremie also pointed out that PARM is not relevant for the RPs who don't have infrastructure at all, so PARM is optional in SIOP.</span></li><li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">We also confirmed that with PARM, user will start the flow on a separate device but end on the same device.</span></li></ul>
<li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">PR #51 Resolvable entity identifiers covers resolvable client_id </span></li><ul>
<li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">The discussion was around whether to be "authoritative", entire registration metadata needs to be included in the object obtainable by resolving a client_id, or not.</span></li><li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">There are use-cases that do not sign the SIOP request, and require preservation of the registration parameter. </span></li><ul>
<li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">To address security concerns we discussed adding a text that "additional redirect_uris should not be accepted even if they are passed inside the registration parameter in the request."</span></li><li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">DW proposed to explicitly define which registration parameters can be included directly in the request.</span></li></ul>
<li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">We discussed that using public keys as the Client identifiers is not recommended</span></li><li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">We discussed that when DID is used as RP's client_id and binding of that DID to the domain is proved, key material can be obtained from the DID Document, but to obtain the rest
of the registration metadata, rather than making another NW call (to a .well-known/openid-config for example), it would make sense to keep registration metadata except for the key material inside the request.</span></li><ul>
<li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">There is no way to include registration metadata except for the key material in the DID Document, which has strictly defined properties</span></li></ul>
<li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Tom Jones pointed out that metadata does change frequently (like terms of use)</span></li><li><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">Jeremie proposed opening an issue on "Self-Issued RPs"</span></li></ul>
</ul>
</ul>
<div><span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">- Issues</span></div>
</div>
</div>
<div lang="JA" style="word-wrap:break-word">
<ul type="disc" style="margin-bottom:0mm">
<li style="margin:0mm; background-image:initial; background-position:initial; background-size:initial; background-repeat:initial; background-attachment:initial; background-origin:initial; background-clip:initial">
<span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">https://bitbucket.org/openid/connect/issues/1342/reevaluate-uri-length-restriction</span><br>
</li><ul>
<li style="margin:0mm; background-image:initial; background-position:initial; background-size:initial; background-repeat:initial; background-attachment:initial; background-origin:initial; background-clip:initial">
<span style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;">DW clarified that the issue is about the length of the redirect of POST URI, HTTP POST method does not use URIs.</span></li></ul>
</ul>
<p class="x_x_x_x_x_x_x_x_x_x_x_x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0mm; font-size:12pt; font-family:SimSun; background:white">
<span lang="EN-US" style="font-family:"Calibri",sans-serif; color:black"><span style="margin:0px; background-color:rgb(255,255,255); display:inline!important"><br>
</span></span></p>
<p class="x_x_x_x_x_x_x_x_x_x_x_x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0mm; font-size:12pt; font-family:SimSun; background:white">
<span lang="EN-US" style="font-family: Calibri, Helvetica, sans-serif; color: black; font-size: 12pt;">Best,</span></p>
<p class="x_x_x_x_x_x_x_x_x_x_x_x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0mm; font-size:12pt; font-family:SimSun">
<span lang="EN-US" style="font-family: Calibri, Helvetica, sans-serif; color: black; font-size: 12pt;">Kristina</span><span lang="EN-US" style="font-size:11.0pt; font-family:"Noto Sans CJK JP Medium",sans-serif; color:#4472C4"></span></p>
<p class="x_x_x_x_x_x_x_x_x_x_x_x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0mm; font-size:12pt; font-family:SimSun">
<span lang="EN-US" style="font-size: 12pt; font-family: Calibri, Helvetica, sans-serif; color: rgb(68, 114, 196);"> </span></p>
<p class="x_x_x_x_x_x_x_x_x_x_x_x_MsoNormal" style="margin-top: 0px; margin-bottom: 0px;margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin-top:0px; margin-bottom:0px; margin:0mm; font-size:12pt; font-family:SimSun">
<span lang="EN-US" style="font-size: 12pt; font-family: Calibri, Helvetica, sans-serif; color: rgb(68, 114, 196);"> </span><span lang="EN-US" style="font-size:11.0pt; font-family:"Noto Sans CJK JP Medium",sans-serif; color:#4472C4"><br>
<br>
</span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>