<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">Here are the minutes, feel free to amend with corrections and additions.</div><div class=""><br class=""></div><div class=""><span class="Apple-style-span" style="border-collapse: separate; line-height: normal; border-spacing: 0px;"><div class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div class=""><div class=""><div class="">Phil</div><div class=""><br class=""></div><div class="">@independentid</div><div class=""><a href="http://www.independentid.com" class="">www.independentid.com</a></div></div></div></div></span><a href="mailto:phil.hunt@oracle.com" class="" style="orphans: 2; widows: 2;">phil.hunt@oracle.com</a></div><div class=""><br class=""></div><div class=""><br class=""></div>Dick has not made progress due to holidays (as have others).<div class=""><br class=""></div><div class="">Roles/Groups/Entitlements are slightly different but heavily overlapping. Do apps use one or two or do they pick one of them?</div><div class=""><br class=""></div><div class="">John - he finds companies tend to pick a pattern, but no consistency. Phil there seems to be transition. Pam explained that roles tend to often be single valued and tend to be fixed (what is your job role). Entitlements can be one-off additional rights added to a user. However, there doesn’t seem to be a consistent model.</div><div class=""><br class=""></div><div class="">Pam - there is a mapping problem between what the IDP has vs. what the app wants.</div><div class=""><br class=""></div><div class="">What are the patterns?</div><div class=""><br class=""></div><div class="">We talked about how some Cloud providers (Google, Amazon, MS, Oracle) might be more directory centric vs. some are just provision my apps. E.g. putting someone in a group drives their access to apps.</div><div class=""><br class=""></div><div class="">There did not seem to be a clear model in the discussion for how entitlements, roles, vs. groups are modelled. Dick raised should we just choose one?</div><div class=""><br class=""></div><div class="">Pam We can drop a stake or we do a data driven survey? We also need to figure out what is the minimum required? Governance is a slippery slope. How does the next developer get things configured so that the IDP can assert the correct data?</div><div class=""><br class=""></div><div class="">The group discussed that we should do a survey of what we can, and then put a stake in the ground?</div><div class=""><br class=""></div><div class="">Pam suggested building a story based description of the requirements. Ping has profiled a number of apps. Most apps need to know are you an employee, partner, or customer? Pam suggested maybe they could start a template.</div><div class=""><br class=""></div><div class="">Dick reports that the Amazon SaaS apps tend to all support roles. Somebody configures the relationship between groups and roles. Almost every app that we have is app specific, they are not centralized or federated.</div><div class=""><br class=""></div><div class="">Dick: Could groups in the IDP be mapped to roles in the application as an approach? </div><div class="">There did not seem to be a clear answer.</div><div class=""><br class=""></div><div class="">Mike: as with Phil there is not a lot of consistency right now and I’m not sure we can impose a particular world view. Though may be we can start.</div><div class=""><br class=""></div><div class="">Dick we want to avoid a customizable engine model where mappings have to be configured?</div><div class=""><br class=""></div><div class="">Mike - suggested maybe there is a discovery process that publishes the available roles etc. Then the IDP admin can configure their mapping.</div><div class=""><br class=""></div><div class="">Lots of discussion, but the general feel is to put a stake in and see how people feel.</div><div class=""><br class=""></div><div class="">Pam agreed to look at some of the models and report back. Phil will also try to do some of the same.</div><div class=""><br class=""></div><div class=""><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class=""><span class="Apple-style-span" style="border-collapse: separate; line-height: normal; border-spacing: 0px;"><div class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div class=""><div class=""><div class="">Meeting ended at 8:56 Pacific.</div></div></div></div></span></div></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline"><br class="Apple-interchange-newline">
</div>
<br class=""></div></body></html>