<div dir="ltr">I did not see any dissenting votes. Were there any? If not, then the WG is approved, correct?<div><br></div><div>Besides setting up the mail list etc., the next step is getting IPR agreements from participants, correct?</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jun 9, 2016 at 11:26 AM, Mike Jones <span dir="ltr"><<a href="mailto:Michael.Jones@microsoft.com" target="_blank">Michael.Jones@microsoft.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060">I am in favor of approving this charter.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060"> -- Mike<u></u><u></u></span></p>
<p class="MsoNormal"><a name="m_-1409948332976130601__MailEndCompose"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#002060"><u></u> <u></u></span></a></p>
<span></span>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Dick Hardt [mailto:<a href="mailto:dick.hardt@gmail.com" target="_blank">dick.hardt@gmail.com</a>]
<br>
<b>Sent:</b> Friday, June 3, 2016 2:20 PM<br>
<b>To:</b> Openid Specs Council <<a href="mailto:openid-specs-council@lists.openid.net" target="_blank">openid-specs-council@lists.openid.net</a>><br>
<b>Cc:</b> Mike Jones <<a href="mailto:Michael.Jones@microsoft.com" target="_blank">Michael.Jones@microsoft.com</a>>; John Bradley <<a href="mailto:ve7jtb@ve7jtb.com" target="_blank">ve7jtb@ve7jtb.com</a>>; Chuck Mortimore <<a href="mailto:cmortimore@salesforce.com" target="_blank">cmortimore@salesforce.com</a>>; Phil Hunt <<a href="mailto:phil.hunt@oracle.com" target="_blank">phil.hunt@oracle.com</a>>; <a href="mailto:Dick@amazon.com" target="_blank">Dick@amazon.com</a><br>
<b>Subject:</b> FastFed WG proposed charter<u></u><u></u></span></p><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">(reposting from personal email as listserv is rejecting email from
<a href="http://amazon.com" target="_blank">amazon.com</a>)<u></u><u></u></p>
<p class="MsoNormal">Please find below the proposed charter to create a new OpenID Foundation Working Group,
<b>FastFed</b><u></u><u></u></p>
<p class="MsoNormal">/Dick<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><b>1) Working Group Name</b><u></u><u></u></p>
<p class="MsoNormal">Fast Federation (FastFed)<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><b>2) Purpose</b><u></u><u></u></p>
<p class="MsoNormal">The purpose of this Working Group is to develop a meta-data document specification, APIs, and workflow to enable an administrator to federate an identity provider and a hosted application
that supports one or more of OpenID Connect, SAML, and SCIM and enable configuration changes to be communicated between the identity provider and hosted application.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><b>3) Scope</b><u></u><u></u></p>
<p class="MsoNormal">The Working Group will define:<u></u><u></u></p>
<p class="MsoNormal">· Meta-data documents for the identity provider and hosted application<u></u><u></u></p>
<p class="MsoNormal">· APIs for the identity provider and hosted application to communicate with each other<u></u><u></u></p>
<p class="MsoNormal">· A recommended workflow for the administrator<u></u><u></u></p>
<p class="MsoNormal">· A mechanism for the identity provider and the application to communicate configuration changes<u></u><u></u></p>
<p class="MsoNormal">Out of scope:<u></u><u></u></p>
<p class="MsoNormal">· Generic federation between identity systems<u></u><u></u></p>
<p class="MsoNormal">· Application configuration mechanisms<u></u><u></u></p>
<p class="MsoNormal">Any items not expressly mentioned as being in scope or out of scope are to be determined by the Working Group.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><b>4) Proposed Deliverables</b><u></u><u></u></p>
<p class="MsoNormal">The Working Group proposed to create one or more documents that specify the meta-data to be provided by the identity provider and hosted application, APIs for configuration communication
between the identity provider and hosted application and mechanism for the identity provider and hosted application to communicate configuration changes. The document(s) will also contain non-normative content to assist implementers in developing and deploying
the specified functionality.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><b>5) Anticipated audience or users</b><u></u><u></u></p>
<p class="MsoNormal">· Identity Providers<u></u><u></u></p>
<p class="MsoNormal">· Hosted application developers<u></u><u></u></p>
<p class="MsoNormal">· Administrators looking to simplify federation of hosted applications<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><b>6) Language</b><u></u><u></u></p>
<p class="MsoNormal">English<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><b>7) Method of Work</b><u></u><u></u></p>
<p class="MsoNormal">E-mail discussions on the working group mailing list, regular working group conference calls, and opportunistic face-to-face meetings when a significant number of active members
are collocated.<u></u><u></u></p>
<p class="MsoNormal">8) Basis for determining when the work is completed:<u></u><u></u></p>
<p class="MsoNormal">Rough consensus and running code. The work will be completed once it is apparent that maximal consensus on the draft has been achieved, consistent with the purpose and scope and
there are at least two identity providers that each work with at least two hosted applications.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><b>Background Information</b><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><b>Related work:</b><u></u><u></u></p>
<p class="MsoNormal">SAML 2.0<u></u><u></u></p>
<p class="MsoNormal">OpenID Connect<u></u><u></u></p>
<p class="MsoNormal">SCIM 2.0 [RFC 7644]<u></u><u></u></p>
<p class="MsoNormal">OpenID Connect Federation proposal submitted to the OpenID Connect working group -<a href="https://github.com/rohe/pyoidc/blob/master/oidc_fed/oidcfed.txt" target="_blank">https://github.com/rohe/pyoidc/blob/master/oidc_fed/oidcfed.txt</a><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><b>Proposers:</b><u></u><u></u></p>
<p class="MsoNormal">Dick Hardt, AWS (editor)<u></u><u></u></p>
<p class="MsoNormal">Michael B. Jones, Microsoft<u></u><u></u></p>
<p class="MsoNormal">John Bradley, Ping Identity<u></u><u></u></p>
<p class="MsoNormal">Chuck Mortimore, Salesforce<u></u><u></u></p>
<p class="MsoNormal">Phil Hunt, Oracle<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal"><b>Expected Workflow</b><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Pre workflow<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">IdP and hosted app have prepared and hosted meta-data files exposing configuration APIs<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Administrator workflow<u></u><u></u></p>
<p class="MsoNormal">1) Admin authenticates to IdP in browser<u></u><u></u></p>
<p class="MsoNormal">2) Admin selects hosted app to federate with from list at IdP (which had previously been configured) or enters URL of hosted app configuration<u></u><u></u></p>
<p class="MsoNormal">3) IdP optionally presents config options<u></u><u></u></p>
<p class="MsoNormal">4) IdP redirects Admin to hosted app<u></u><u></u></p>
<p class="MsoNormal">5) Admin authenticates to hosted app or creates new account<u></u><u></u></p>
<p class="MsoNormal">6) Hosted app optionally gathers config options<u></u><u></u></p>
<p class="MsoNormal">7) Hosted app redirects admin to IdP<u></u><u></u></p>
<p class="MsoNormal">8) IdP confirms successful federation => OIDC, SAML, and/or SCIM are now configured and working between IdP and hosted app<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Post Workflow<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<p class="MsoNormal">Changes to IdP or hosted application configuration are made and appropriate actions are taken by the other party.<u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div></div></div>
</div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div>Subscribe to the <a href="http://hardtware.com/" target="_blank">HARDTWARE</a> mail list to learn about projects I am working on!</div></div></div></div></div></div>
</div>