<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Aptos",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#467886;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Aptos",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:11.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#467886" vlink="#96607D" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">It’s the responsibility of working groups to define certification tests for their specifications. As the OpenID Federation specification and deployments mature, it makes sense to start that process.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">As some of you know, there are test cases for one of the Italian deployments of OpenID Federation. Their
<a href="https://docs.google.com/spreadsheets/d/1uDlren1xXtsqCt9zroviS_UUVJLKZp-u/edit#gid=1876261402">
test case spreadsheet</a> contains 791 test descriptions, but some of them test things specific to that Italian deployment and some of them test OpenID Connect functionality (which overlaps with the OpenID Connect tests at
<a href="https://openid.net/certification/">https://openid.net/certification/</a>). I filtered their spreadsheet to remove the Connect tests and those for extension entity types and got it down to 212 test descriptions, which are in the attached spreadsheet.
I then read all 212 and annotated them as to whether they tested general-purpose Federation functionality or whether they are testing things specific to the Italian profile.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">That resulted in 60 general-purpose tests (marked “Yes”) and another 7 that can be used when optional features are present (marked “Conditional”). Those marked “?” bear further evaluation to determine if there is a related test that we
should create that is general-purpose or conditional. Those marked “No” are typically testing Italian-specific functionality.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m certain that we’ll want additional tests, but it made sense to start with test definitions others had already created. That gives us a solid starting point.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">There will be a certification team face-to-face before the OAuth Security workshop in Rome next week. Federation Certification will be one of the topics there.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">By all means, review the tests marked “Yes” and “Conditional” and add your thoughts. And if you’re daring, also take a stab at what we should do about the ones marked “?”.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> Thanks all,<o:p></o:p></p>
<p class="MsoNormal"> -- Mike<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>