<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title></title>
</head>
<body>
<div name="messageBodySection">
<div dir="auto">+1 </div>
</div>
<div name="messageReplySection">2024年9月13日 9:26 +0900、Michael Jones via specs-council <openid-specs-council@lists.openid.net>のメール:<br />
<blockquote type="cite">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">For the record, I support the proposed charter.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Other Specs Council members (John, Tim, Ashish, Breno, Chuck, Nat), can you also put your opinions on record?</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> Thanks,</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> -- Mike</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b> <span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Aaron Parecki <aaron.parecki@okta.com><br />
<b>Sent:</b> Tuesday, September 10, 2024 1:32 PM<br />
<b>To:</b> openid-specs-council@lists.openid.net<br />
<b>Cc:</b> Atul Tulshibagwale <atul@sgnl.ai>; dean.saxe@beyondidentity.com; Michael Jones <michael_b_jones@hotmail.com>; pamela.dingle@microsoft.com; george.fletcher@capitalone.com<br />
<b>Subject:</b> Proposed charter: Interoperability Profiling for Secure Identity in the Enterprise (IPSIE) working group</span></p>
</div>
<p class="MsoNormal"> </p>
<div>
<div>
<div>
<p class="MsoNormal">Hello Specifications Council, </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">(cc all proposers)<br />
<br />
Please see the charter proposal below for the Interoperability Profiling for Secure Identity in the Enterprise (IPSIE) working group.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Thank you!</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">---</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Interoperability Profiling for Secure Identity in the Enterprise (IPSIE) Working Group Charter</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">1) Working group name</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Interoperability Profiling for Secure Identity in the Enterprise (IPSIE) Working Group</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">2) Purpose</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">The purpose of this working group is to develop interoperability and security profiles of existing specifications that enable secure identity management within the enterprise.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">The current state of identity within an enterprise extends well beyond single-sign-on. Many aspects of enterprise identity are covered by specifications both within and outside the OpenID Foundation, such as OpenID Connect, Shared Signals Framework, OAuth, and SCIM. These specifications often enable a wide range of capabilities, in many cases capabilities that go beyond the minimum requirements for enterprise identity management, and sometimes also include features that are not relevant in an enterprise context. Additionally, many of these specifications are frameworks and contain optionality to the point of two independent implementations not being guaranteed to be interoperable without further coordination.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">This working group will develop profiles of existing specifications with the primary goal of achieving independent implementations being interoperable, while also prioritizing secure defaults within the specifications.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">The initial problem space of the working group is focused around:</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">* Single Sign-On</p>
</div>
<div>
<p class="MsoNormal">* User Lifecycle Management</p>
</div>
<div>
<p class="MsoNormal">* Entitlements</p>
</div>
<div>
<p class="MsoNormal">* Risk Signal Sharing</p>
</div>
<div>
<p class="MsoNormal">* Logout</p>
</div>
<div>
<p class="MsoNormal">* Token Revocation</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">The working group may also address problems such as:</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">* Discoverability of specific features within the above-mentioned capabilities</p>
</div>
<div>
<p class="MsoNormal">* New user onboarding and account recovery</p>
</div>
<div>
<p class="MsoNormal">* Discovering the applications used within an enterprise</p>
</div>
<div>
<p class="MsoNormal">* Monitoring and provisioning application usage</p>
</div>
<div>
<p class="MsoNormal">* Managing restrictions on application usage</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">3) Scope</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">The scope of the working group includes:</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">* Develop profiles of existing specifications with the goal of interoperability within the enterprise ecosystem.</p>
</div>
<div>
<p class="MsoNormal">* Define an interoperability profile of OpenID Connect that meets the needs and security requirements of the enterprise.</p>
</div>
<div>
<p class="MsoNormal">* Define an interoperability profile of Shared Signals Framework that enables sharing signals about threat detection and device posture.</p>
</div>
<div>
<p class="MsoNormal">* Define an interoperability profile of SCIM that enables user account lifecycle and entitlements management.</p>
</div>
<div>
<p class="MsoNormal">* Define an interoperability profile of logout specifications to enable an identity provider to revoke sessions and tokens of downstream applications.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Out of scope:</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Developing new general-purpose specifications, technologies, or features is out of scope of this working group. Profiles are created by including or excluding parts of existing specifications.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">If a pertinent problem space without an existing specification is identified, an effort will first be made to find an existing working group or standards body where development of the specification may be more appropriate. If none is found, consideration will be given to creating a new specification within this working group.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">The working group will actively coordinate with the following working groups doing related work:</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">* OpenID Connect</p>
</div>
<div>
<p class="MsoNormal">* FAPI</p>
</div>
<div>
<p class="MsoNormal">* iGov</p>
</div>
<div>
<p class="MsoNormal">* Shared Signals</p>
</div>
<div>
<p class="MsoNormal">* OAuth</p>
</div>
<div>
<p class="MsoNormal">* SCIM</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">4) Proposed specifications</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">The initial proposed deliverable by the group is:</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Interoperability Profile for Secure Identity in the Enterprise (IPSIE)</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">This specification will be divided into sections for each use case, with subsections for each specification that this profiles. </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">The group may provide additional interoperability profile specifications that address the concerns of specific use cases or certain specifications that require interoperability profiles.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">5) Anticipated audience of users</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Identity Providers that serve an enterprise customer market</p>
</div>
<div>
<p class="MsoNormal">SaaS apps that sell to enterprise customers, also known as Independent Software Vendors (ISVs)</p>
</div>
<div>
<p class="MsoNormal">Developers of tools, libraries, and other resources in support of either of the previous two audiences</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">6) Language</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">English</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">7) Method of work</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Mailing list and telephone/internet conference calls combined with face-to-face (where needed) and information sharing/collaborative working via online tools.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">8) Basis for determining when the work is completed</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Approved “final” specifications consistent with the purpose and scope that have been through the OpenID Foundation process including vote by the membership and running code in one or more proof-of-concept, interoperability event, or commercial projects.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Proposers</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">* Aaron Parecki (Okta)</p>
</div>
<div>
<p class="MsoNormal">* Atul Tulshibagwale (SGNL)</p>
</div>
<div>
<p class="MsoNormal">* George Fletcher (Capital One)</p>
</div>
<div>
<p class="MsoNormal">* Mike Jones (Self-Issued Consulting)</p>
</div>
<div>
<p class="MsoNormal">* Dean H. Saxe (Beyond Identity)</p>
</div>
<div>
<p class="MsoNormal">* Pamela Dingle (Microsoft)</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<p class="MsoNormal"><br clear="all" /></p>
<div>
<div>
<div>
<div>
<div>
<div>
<p style="margin:0in;line-height:14.0pt"><b><span style="font-family:"Calibri",sans-serif;color:black">Aaron Parecki</span></b></p>
<p style="margin:0in;line-height:14.0pt"><span style="font-family:"Calibri",sans-serif;color:black">Director of Identity Standards</span></p>
<p style="margin:0in;line-height:14.0pt"><span style="font-family:"Calibri",sans-serif;color:black"><a href="mailto:aaron.parecki@okta.com" target="_blank">aaron.parecki@okta.com</a></span></p>
<div>
<p class="MsoNormal"><span style="font-family:"Times",serif;color:black"> </span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"Calibri",sans-serif;color:black"> </span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</body>
</html>