<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:"Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@Yu Gothic";
panose-1:2 11 4 0 0 0 0 0 0 0;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.xxxxxxxxxxxxxxxxxxxxxmsonormal, li.xxxxxxxxxxxxxxxxxxxxxmsonormal, div.xxxxxxxxxxxxxxxxxxxxxmsonormal
{mso-style-name:x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_msonormal;
margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.xxxxxxxxxxxxxxxxxxxxxmarka6v39w0tx
{mso-style-name:x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_x_marka6v39w0tx;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:324208517;
mso-list-template-ids:1979198834;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1
{mso-list-id:885026236;
mso-list-type:hybrid;
mso-list-template-ids:-355563834 575707624 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l1:level1
{mso-level-start-at:0;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.25in;
text-indent:-.25in;
font-family:"Calibri",sans-serif;
mso-fareast-font-family:"Yu Gothic";}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:.75in;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.25in;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:1.75in;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.25in;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:2.75in;
text-indent:-.25in;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.25in;
text-indent:-.25in;
font-family:Symbol;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:3.75in;
text-indent:-.25in;
font-family:"Courier New";}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:none;
mso-level-number-position:left;
margin-left:4.25in;
text-indent:-.25in;
font-family:Wingdings;}
@list l2
{mso-list-id:1456633122;
mso-list-template-ids:-360024080;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3
{mso-list-id:1592815198;
mso-list-template-ids:-733998258;}
@list l3:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l3:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l3:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l3:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">David Chadwick<o:p></o:p></p>
<p class="MsoNormal">Vittorio Bertocci<o:p></o:p></p>
<p class="MsoNormal">Daniel Fett<o:p></o:p></p>
<p class="MsoNormal">Giuseppe De Marco<o:p></o:p></p>
<p class="MsoNormal">Joseph Heenan<o:p></o:p></p>
<p class="MsoNormal">Torsten Lodderstedt<o:p></o:p></p>
<p class="MsoNormal">Jo Vercammen<o:p></o:p></p>
<p class="MsoNormal">David Schudde<o:p></o:p></p>
<p class="MsoNormal">Rolson Quadras<o:p></o:p></p>
<p class="MsoNormal">David Waite<o:p></o:p></p>
<p class="MsoNormal">Tom Jones<o:p></o:p></p>
<p class="MsoNormal">John Bradley<o:p></o:p></p>
<p class="MsoNormal">Petteri Stenius<o:p></o:p></p>
<p class="MsoNormal">Mike Jones<o:p></o:p></p>
<p class="MsoNormal">Kristina Yasuda<o:p></o:p></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="xxxxxxxxxxxxxxxxxxxxxmsonormal" style="background:white"><span style="font-size:12.0pt;color:black">- meeting recorded</span><span style="font-size:12.0pt"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="xxxxxxxxxxxxxxxxxxxxxmsonormal" style="background:white"><span style="font-size:12.0pt;color:black">- Introductions:</span><span style="font-size:12.0pt"><o:p></o:p></span></p>
<p class="MsoNormal"> - David Schudde from Yorba introduced himself:
<a href="https://yorba.co">https://yorba.co</a>. He can be reached at <a href="mailto:schmudde@yorba.co">
schmudde@yorba.co</a><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="xxxxxxxxxxxxxxxxxxxxxmsonormal" style="background:white"><span style="font-size:12.0pt;color:black">- <span class="xxxxxxxxxxxxxxxxxxxxxmarka6v39w0tx">Agenda</span> adopted</span><span style="font-size:12.0pt;font-family:SimSun"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-left:-.25in;mso-list:l1 level1 lfo4"><span style="font-size:12.0pt">Industry update<o:p></o:p></span></li></ul>
<ul style="margin-top:0in" type="disc">
<ul style="margin-top:0in" type="circle">
<li class="MsoListParagraph" style="margin-left:-.25in;mso-list:l1 level2 lfo4"><span style="font-size:12.0pt">W3C VC WG finalized charter for the vc-data-model-v2:</span>
<a href="https://w3c.github.io/vc-wg-charter/">Verifiable Credentials Working Group Charter (w3c.github.io)</a><span style="font-size:12.0pt"><o:p></o:p></span></li></ul>
</ul>
<ul style="margin-top:0in" type="disc">
<ul style="margin-top:0in" type="circle">
<ul style="margin-top:0in" type="square">
<li class="MsoListParagraph" style="margin-left:-.25in;mso-list:l1 level3 lfo4"><span style="font-size:12.0pt">If all goes smoothly, the work on it would start within the few months, once the charter gets approved<o:p></o:p></span></li></ul>
</ul>
</ul>
<ul style="margin-top:0in" type="disc">
<ul style="margin-top:0in" type="circle">
<li class="MsoListParagraph" style="margin-left:-.25in;mso-list:l1 level2 lfo4"><span style="font-size:12.0pt">ISO SC17 WG10 working on presentation of mDL over the Internet has asked about the stable version of SIOPv2 and OIDC4VP, since the latest technical
specification from ISO mentions it<o:p></o:p></span></li></ul>
</ul>
<ul style="margin-top:0in" type="disc">
<ul style="margin-top:0in" type="circle">
<ul style="margin-top:0in" type="square">
<li class="MsoListParagraph" style="margin-left:-.25in;mso-list:l1 level3 lfo4"><span style="font-size:12.0pt">WG agreed to work towards publishing Second Implementer’s Drafts of SIOPv2/OIDC4VP with all the breaking changes from the First Implementer’s Drafts
before the publication of the ISO’s specification, so that the document referenced by the ISO is very unlikely to have technical breaking changes before going to final<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:-.25in;mso-list:l1 level3 lfo4"><span style="font-size:12.0pt">Editors will start with triaging the issues to have a list of potential breaking changes that needs to be prioritized in the WG<o:p></o:p></span></li><li class="MsoListParagraph" style="margin-left:-.25in;mso-list:l1 level3 lfo4"><span style="font-size:12.0pt">ISO SC17 WG10 agreed that SIOP features have “parity” with mdoc request-response that ISO WG has been working on (huge progress)<o:p></o:p></span></li></ul>
</ul>
</ul>
<p class="MsoListParagraph" style="margin-left:1.25in"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<ul style="margin-top:0in" type="disc">
<li class="MsoListParagraph" style="margin-left:-.25in;mso-list:l1 level1 lfo4"><span style="font-size:12.0pt">Editors of the OIDC4VCI spec indicated that they would like to make as much progress as possible on the specification before IIW
<o:p></o:p></span></li></ul>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black">- PRs </span><a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbitbucket.org%2Fopenid%2Fconnect%2Fpull-requests%2F&data=04%7C01%7CKristina.Yasuda%40microsoft.com%7C076de138a9434313d7df08da07b1c590%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637830758257768797%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=NvwjmfI%2Fu8jgnKi%2FREuHrJnm0RjZmYT6F5I1XjaCxiY%3D&reserved=0"><span style="font-size:12.0pt">https://bitbucket.org/openid/connect/pull-requests/</span></a><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<ul type="disc">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:1.0in;mso-margin-bottom-alt:auto;mso-list:l3 level1 lfo2">
<b>PR #138 – oidc4vci: pre-authorized code: </b><a href="https://bitbucket.org/openid/connect/pull-requests/138">https://bitbucket.org/openid/connect/pull-requests/138</a><b><o:p></o:p></b></li></ul>
<ul type="disc">
<ul type="circle">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:1.0in;mso-margin-bottom-alt:auto;mso-list:l3 level2 lfo2">
Torsten introduced the issue. <o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:1.0in;mso-margin-bottom-alt:auto;mso-list:l3 level2 lfo2">
Daniel F. pointed out the need to add new security considerations since anyone who can get hold of a QR code could get a VC issued<o:p></o:p></li></ul>
</ul>
<ul type="disc">
<ul type="circle">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:1.5in;mso-margin-bottom-alt:auto;mso-list:l3 level2 lfo2">
Mix-Up attack, Brute Forcing attack on the PIN, Authorization code injection attack were mentioned<o:p></o:p></li></ul>
</ul>
<ul type="disc">
<ul type="circle">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:1.0in;mso-margin-bottom-alt:auto;mso-list:l3 level2 lfo2">
David C. clarified if the PIN was one-time use. Currently it is intended to be one-time used, passed via a separate channel<o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:1.0in;mso-margin-bottom-alt:auto;mso-list:l3 level2 lfo2">
WG members are encouraged to review the PR, especially on the security aspect<o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:1.0in;mso-margin-bottom-alt:auto;mso-list:l3 level2 lfo2">
We agreed to discuss this PR during the next SIOP call, after people had more time to review it<o:p></o:p></li></ul>
</ul>
<ul type="disc">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:1.0in;mso-margin-bottom-alt:auto;mso-list:l3 level1 lfo2">
PR #136 – oidc4vci: clarify holder binding: <a href="https://bitbucket.org/openid/connect/pull-requests/136">
https://bitbucket.org/openid/connect/pull-requests/136</a><o:p></o:p></li></ul>
<ul type="disc">
<ul type="circle">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:1.0in;mso-margin-bottom-alt:auto;mso-list:l3 level2 lfo2">
merged <o:p></o:p></li></ul>
</ul>
<ul type="disc">
<ul type="circle">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:1.5in;mso-margin-bottom-alt:auto;mso-list:l3 level2 lfo2">
Issues #1453, #1452 resolved<o:p></o:p></li></ul>
</ul>
<ul type="disc">
<li class="MsoListParagraph" style="mso-margin-top-alt:auto;margin-right:3.0in;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l3 level1 lfo2">
We did not cover more PRs, but people are encouraged to review. In particular,<o:p></o:p></li></ul>
<ul type="disc">
<ul type="circle">
<li class="MsoListParagraph" style="mso-margin-top-alt:auto;margin-right:3.0in;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l3 level2 lfo2">
PR #145: [oidc4vci] Revises the approach to credential metadata publishing: <a href="https://bitbucket.org/openid/connect/pull-requests/145">
https://bitbucket.org/openid/connect/pull-requests/145</a><o:p></o:p></li></ul>
</ul>
<ul type="disc">
<ul type="circle">
<ul type="square">
<li class="MsoListParagraph" style="mso-margin-top-alt:auto;margin-right:3.0in;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l3 level3 lfo2">
Related to issue #1466<o:p></o:p></li></ul>
</ul>
</ul>
<ul type="disc">
<ul type="circle">
<li class="MsoListParagraph" style="mso-margin-top-alt:auto;margin-right:3.0in;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l3 level2 lfo2">
PR #142 oidc4vp: example with anoncreds: <a href="https://bitbucket.org/openid/connect/pull-requests/142">
https://bitbucket.org/openid/connect/pull-requests/142</a><o:p></o:p></li><li class="MsoListParagraph" style="mso-margin-top-alt:auto;margin-right:3.0in;mso-margin-bottom-alt:auto;margin-left:0in;mso-list:l3 level2 lfo2">
PR #144 updating SIOP v2 definition: <a href="https://bitbucket.org/openid/connect/pull-requests/144">
https://bitbucket.org/openid/connect/pull-requests/144</a><o:p></o:p></li></ul>
</ul>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">- Issues <a href="https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbitbucket.org%2Fopenid%2Fconnect%2Fissues%3Fstatus%3Dnew%26status%3Dopen%26component%3DSIOP%26component%3DVerifiable%2520Presentation%26component%3DCredential%2520Issuance&data=04%7C01%7CKristina.Yasuda%40microsoft.com%7C076de138a9434313d7df08da07b1c590%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637830758257768797%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000&sdata=ccce9PXmdGPLv%2FssVmoUlIkXN%2FudMScnnEVJSuAegHQ%3D&reserved=0"><span style="font-size:12.0pt">https://bitbucket.org/openid/connect/issues?status=new&status=open&component=SIOP&component=Verifiable%20Presentation&component=Credential%20Issuance</span></a><o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<ul type="disc">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:.5in;mso-margin-bottom-alt:auto;mso-list:l2 level1 lfo3">
#1467: DID resolver method for OIDC Federation (did:openid:!) wrt SIOP v2: <a href="https://bitbucket.org/openid/connect/issues/1467/did-resolver-method-for-oidc-federation">
https://bitbucket.org/openid/connect/issues/1467/did-resolver-method-for-oidc-federation</a><o:p></o:p></li></ul>
<ul type="disc">
<ul type="circle">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:.5in;mso-margin-bottom-alt:auto;mso-list:l2 level2 lfo3">
There is a need to clarify what we would achieve by replacing http URL with DIDs as a mechanism to obtain Entity Statements in OpenID Federation<o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:.5in;mso-margin-bottom-alt:auto;mso-list:l2 level2 lfo3">
WG members are encouraged to continue discussion in the Issue<o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:.5in;mso-margin-bottom-alt:auto;mso-list:l2 level2 lfo3">
Probably better to classify this as Federation related issue<o:p></o:p></li></ul>
</ul>
<ul type="disc">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:.5in;mso-margin-bottom-alt:auto;mso-list:l2 level1 lfo3">
#1470: SIOP Response without ID Token with only a VP Token: <a href="https://bitbucket.org/openid/connect/issues/1470/siop-response-with-vp_token-only">
https://bitbucket.org/openid/connect/issues/1470/siop-response-with-vp_token-only</a><o:p></o:p></li></ul>
<ul type="disc">
<ul type="circle">
<li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:.5in;mso-margin-bottom-alt:auto;mso-list:l2 level2 lfo3">
Vittorio pointed out that without ID Token, this would not be OpenID Connect<o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:.5in;mso-margin-bottom-alt:auto;mso-list:l2 level2 lfo3">
Torsten made a point that it will still be a protocol on top of OAuth, and if we want OAuth/OIDC based protocols to be used, they should be as simple as possible to be able to compete with other emerging protocols<o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:.5in;mso-margin-bottom-alt:auto;mso-list:l2 level2 lfo3">
Rolson shared that as an implementer who started implementing SIOPv2/OIDC4VP already having VC/DID implementation, they got VP Token part straightforward, but still struggle with ID Token implementation<o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:.5in;mso-margin-bottom-alt:auto;mso-list:l2 level2 lfo3">
John advised not to use `scope` parameter to indicate that there is no need for the OP to return an ID Token, so as to be respectful for the existing OP implementations. Probably use response_type, or response_mode. This would be especially relevant if we will
expand definition of SIOP and allow self-issued ID Tokens to be sent using code flow.<o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:.5in;mso-margin-bottom-alt:auto;mso-list:l2 level2 lfo3">
Torsten mentioned few use-cases where SIOP with code flow would make sense – cloud wallet, eIDAS, etc.
<a href="https://bitbucket.org/openid/connect/issues/1399/siop-with-any-oidc-flow">
https://bitbucket.org/openid/connect/issues/1399/siop-with-any-oidc-flow</a><o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:.5in;mso-margin-bottom-alt:auto;mso-list:l2 level2 lfo3">
There was support in the chat towards using `response_type`<o:p></o:p></li><li class="MsoNormal" style="mso-margin-top-alt:auto;margin-right:.5in;mso-margin-bottom-alt:auto;mso-list:l2 level2 lfo3">
We agreed to explore mechanisms to turn off a feature to return ID Tokens, also taking into account existing OIDC implementations, who might support self-signed ID Token features<o:p></o:p></li></ul>
</ul>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<ul style="margin-top:0in" type="disc">
<li class="xxxxxxxxxxxxxxxxxxxxxmsonormal" style="margin-left:-.25in;mso-list:l1 level1 lfo4;background:white">
<span style="font-size:12.0pt;color:black">From the chat</span><span style="font-size:12.0pt"><o:p></o:p></span></li></ul>
<ul style="margin-top:0in" type="disc">
<ul style="margin-top:0in" type="circle">
<li class="xxxxxxxxxxxxxxxxxxxxxmsonormal" style="margin-left:-.25in;mso-list:l1 level2 lfo4;background:white">
<span style="font-size:12.0pt;color:black">Tom Jones: “The PEMC is creating a set of requirement for any identifier that is send from a verifier to a wallet in order to assure the the user can make a valid conset to release data - would the SIOP be interested
in such requirements? They would apply to SIOP and well as 18013-5 if adopted. My own take on this would be that any identifier contained in the requiest would be guaranteed (tbd) by the verifier to be a valid representation of the request. For example if
square the request they would guarantee the identifier of the merchant in the request”</span><span style="font-size:12.0pt"><o:p></o:p></span></li><li class="xxxxxxxxxxxxxxxxxxxxxmsonormal" style="margin-left:-.25in;mso-list:l1 level2 lfo4;background:white">
<span style="font-size:12.0pt;color:black">Relevant URL?: <a href="https://kantarainitiative.org/groups/PImDL-work-group/">
https://kantarainitiative.org/groups/PImDL-work-group/</a></span><span style="font-size:12.0pt"><o:p></o:p></span></li></ul>
</ul>
<p class="xxxxxxxxxxxxxxxxxxxxxmsonormal" style="background:white"><span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="xxxxxxxxxxxxxxxxxxxxxmsonormal" style="background:white"><span style="font-size:12.0pt;color:black">Next SIOP call is April 7<sup>th</sup> 8am PST.</span><span style="font-size:12.0pt"><o:p></o:p></span></p>
<p class="xxxxxxxxxxxxxxxxxxxxxmsonormal" style="margin-left:.75in;background:white">
<span style="font-size:12.0pt"><o:p> </o:p></span></p>
<p class="xxxxxxxxxxxxxxxxxxxxxmsonormal" style="background:white"><span style="font-size:12.0pt;color:black">Thank you!</span><span style="font-size:12.0pt;font-family:SimSun"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="xxxxxxxxxxxxxxxxxxxxxmsonormal"><span style="font-size:12.0pt;color:black">Kristina</span><span style="font-size:12.0pt;font-family:SimSun"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="xxxxxxxxxxxxxxxxxxxxxmsonormal"><span style="font-size:12.0pt"> </span><span style="font-size:12.0pt;font-family:SimSun"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p><o:p> </o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>