<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Darin,<div class=""><br class=""></div><div class="">Thanks for getting this initial strawman out the door. This is a *really* good document and will move us forward greatly!</div><div class=""><br class=""></div><div class="">I’ve had a chance to review the document and a couple things come to mind.</div><div class="">In general:</div><div class="">A. Use of user-agent to facilitate registration. I think we may be looking for an API approach. Also, technically, I think securing redirects is tough business.</div><div class=""><br class=""></div><div class="">B Use of initial access tokens and software statements - I think we should talk about the use cases a bit more. In some cases software statements - especially ones generated by a certification agency (e.g. OIDF or OIX) could be a way to trust a registrant. Initial access tokens could be used as a way for an administrator to obtain registration permission manually in adhoc scenarios.</div><div class=""><br class=""></div><div class="">Regarding the flows...</div><div class="">1) who can access the service? </div><div class=""> this is unclear - can we choose between SCIM groups vs. entitlement?<br class=""><br class="">2) Are we going to describe support for “Provisioned” (all user attributes have been propagated)<br class="">vs. JIT (provisioning from the token) vs. Virtual (no long term retention of user attributes).<br class=""><br class="">3) How far to go with describing directory sync? Is this in or out-of-scope? I think the enterprise cases will definitely want this. Either from Fast Fed or another WG.<br class=""><br class="">4) Secevents signals can be exchanged between the two; these should probably be included in scope given that RISC is well underway. Encouraging Product Managers to get their products to support FastFed and federation events is probably a big payoff.<br class=""><br class="">5) Define the "App Admin” role. Is this the person at ACME corporation (the tenant) who wants to bind one or more ACME controlled IdPs as a source of identity for the SaaS service?<br class=""><br class="">6) There is a role for a trusted intermediary creating signed software statements qualifying the SaaS application, ensures that <br class="">the SaaS application isn’t bogus. This could be done by OIDF, or it could be done by major host providers for their SaaS app communities. E.g. Google, Oracle, MS can issue statements for SaaS apps they offer or host. Thus, OIDC OPs can simply configure trust of a small set of issuers for most cases.</div><div class=""><br class=""></div><div class="">Thanks again,</div><div class=""><br class=""><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class=""><span class="Apple-style-span" style="border-collapse: separate; line-height: normal; border-spacing: 0px;"><div class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div class=""><div class=""><div class="">Phil</div><div class=""><br class=""></div><div class="">Oracle Corporation, Identity Cloud Services Architect & Standards</div><div class="">@independentid</div><div class=""><a href="http://www.independentid.com/" class="">www.independentid.com</a></div></div></div></div></span><a href="mailto:phil.hunt@oracle.com" class="" style="orphans: 2; widows: 2;">phil.hunt@oracle.com</a></div></div></div></div></div></div></div></div></div></div></div></div>
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On May 3, 2017, at 9:08 AM, McAdams, Darin via Openid-specs-fastfed <<a href="mailto:openid-specs-fastfed@lists.openid.net" class="">openid-specs-fastfed@lists.openid.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Just chatted with Mike. He'll be hosting a session today on OTTO schemas<br class=""><br class="">Sent from my mobile</div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class="">On May 3, 2017, at 8:15 AM, Nat Sakimura <<a href="mailto:n-sakimura@nri.co.jp" style="color: purple; text-decoration: underline;" class="">n-sakimura@nri.co.jp</a>> wrote:<br class=""><br class=""></div><blockquote type="cite" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><div class=""><div class="WordSection1" style="page: WordSection1;"><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><a name="_MailEndCompose" class=""><span lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif; color: rgb(31, 73, 125);" class="">Perhaps we can try to grab Mike S. today to figure out what can be done re: OTTO.<o:p class=""></o:p></span></a></div><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif; color: rgb(31, 73, 125);" class="">Nat Sakimura<o:p class=""></o:p></span></div><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div><div class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" style="font-size: 10pt; font-family: 'ＭＳ ゴシック'; color: rgb(31, 73, 125);" class="">--<o:p class=""></o:p></span></div><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" style="font-size: 10pt; font-family: 'ＭＳ ゴシック'; color: rgb(31, 73, 125);" class="">PLEASE READ :This e-mail is confidential and intended for the<o:p class=""></o:p></span></div><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" style="font-size: 10pt; font-family: 'ＭＳ ゴシック'; color: rgb(31, 73, 125);" class="">named recipient only. If you are not an intended recipient,<o:p class=""></o:p></span></div><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" style="font-size: 10pt; font-family: 'ＭＳ ゴシック'; color: rgb(31, 73, 125);" class="">please notify the sender and delete this e-mail.<o:p class=""></o:p></span></div></div><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" style="font-size: 10pt; font-family: Arial, sans-serif; color: rgb(31, 73, 125);" class=""><o:p class=""> </o:p></span></div><div style="border-style: none none none solid; border-left-width: 1.5pt; border-left-color: blue; padding: 0mm 0mm 0mm 4pt;" class=""><div class=""><div style="border-style: solid none none; border-top-width: 1pt; border-top-color: rgb(225, 225, 225); padding: 3pt 0mm 0mm;" class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><b class=""><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif;" class="">From:</span></b><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif;" class=""><span class="Apple-converted-space"> </span>Openid-specs-fastfed [<a href="mailto:openid-specs-fastfed-bounces@lists.openid.net" style="color: purple; text-decoration: underline;" class="">mailto:openid-specs-fastfed-bounces@lists.openid.net</a>]<span class="Apple-converted-space"> </span><b class="">On Behalf Of<span class="Apple-converted-space"> </span></b>McAdams, Darin via Openid-specs-fastfed<br class=""><b class="">Sent:</b><span class="Apple-converted-space"> </span>Wednesday, May 3, 2017 10:35 PM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span><a href="mailto:openid-specs-fastfed@lists.openid.net" style="color: purple; text-decoration: underline;" class="">openid-specs-fastfed@lists.openid.net</a><br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: [Openid-specs-fastfed] FastFed doc for discussion<o:p class=""></o:p></span></div></div></div><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class=""><o:p class=""> </o:p></span></div><div class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class="">Hi all,<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class="">Let me know if there's a specific area you'd like to dive into (or you can host the session).<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class=""><br class="">The hot topic I noted yesterday was an open question around alignment with OTTO from Kantara, especially the representation of metadata. Since I know little of OTTO, will try to find someone from that group to volunteer.<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class=""><br class="">Sent from my mobile<o:p class=""></o:p></span></div></div><div class=""><p class="MsoNormal" style="margin: 0mm 0mm 12pt; font-size: 12pt; font-family: 'Times New Roman', serif;"><span lang="EN-US" class=""><br class="">On May 2, 2017, at 11:18 PM, Dick Hardt <<a href="mailto:dick.hardt@gmail.com" style="color: purple; text-decoration: underline;" class="">dick.hardt@gmail.com</a>> wrote:<o:p class=""></o:p></span></p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" class=""><div class=""><div class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class="">For those of us at IIW, we had a session today, and will have another session tomorrow on FastFed.<o:p class=""></o:p></span></div></div><div class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class=""><o:p class=""> </o:p></span></div><div class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class="">On Sun, Apr 30, 2017 at 5:27 PM,<span class="Apple-converted-space"> </span></span><span lang="EN-US" style="font-family: 'ＭＳ 明朝', serif;" class="">富士榮尚寛</span><span lang="EN-US" class=""><span class="Apple-converted-space"> </span>via Openid-specs-fastfed <<a href="mailto:openid-specs-fastfed@lists.openid.net" target="_blank" style="color: purple; text-decoration: underline;" class="">openid-specs-fastfed@lists.openid.net</a>> wrote:<o:p class=""></o:p></span></div><blockquote style="border-style: none none none solid; border-left-width: 1pt; border-left-color: rgb(204, 204, 204); padding: 0mm 0mm 0mm 6pt; margin-left: 4.8pt; margin-right: 0mm;" class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span class="im"><span lang="EN-US" class="">Hello Darin,</span></span><span lang="EN-US" class=""><br class=""><br class=""><span class="im">apologize for less contribution.</span><br class=""><br class=""><span class="im">From my experience, in some case we have to consider for a scenario</span><br class=""><span class="im">that supporting multiple instances of the same SP for a single IdP</span><br class=""><span class="im">instance. Because almost all enterprise have dev/qa/prod instances for</span><br class=""><span class="im">the same applications, but in some case they do not want to have</span><br class=""><span class="im">multiple instances of IdP. For example, my customer are using G Suite</span><br class=""><span class="im">dev/prod instances which were configured SSO with single Azure AD.</span><br class=""><br class=""><span class="im">So my proposal for your question on page 8, at least application name</span><br class=""><span class="im">should be obtained from fastfed-discovery endpoint, like G Suite for</span><br class=""><span class="im">dev, so that admins recognize SP's instance.</span><br class=""><br class=""><span class="im">Regards,</span><br class=""><span class="im">Naohiro</span><br class=""><br class=""><span class="im">2017-04-30 12:06 GMT+09:00 McAdams, Darin via Openid-specs-fastfed</span><br class=""><span class="im"><<a href="mailto:openid-specs-fastfed@lists.openid.net" style="color: purple; text-decoration: underline;" class="">openid-specs-fastfed@lists.openid.net</a>>:</span><o:p class=""></o:p></span></div><div class=""><div class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class="">> Hi all,<br class="">><br class="">> Doc attached, including a set of Open Issues that may be good for<br class="">> discussions. See many of you next week.<br class="">><br class="">> -Darin<br class="">><br class="">><o:p class=""></o:p></span></div></div></div><div class=""><div class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class="">> _______________________________________________<br class="">> Openid-specs-fastfed mailing list<br class="">><span class="Apple-converted-space"> </span><a href="mailto:Openid-specs-fastfed@lists.openid.net" style="color: purple; text-decoration: underline;" class="">Openid-specs-fastfed@lists.openid.net</a><br class="">><span class="Apple-converted-space"> </span><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Dfastfed&d=DwMFAg&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=DIpWRxBqCD7w8EwTUg2e_V7cCV7Y6V3kXK3XSB3noFE&s=CKtWUoWymQjX9gEOwC-dFy_c8PDVB-q-VeSv4-okR5A&e=" target="_blank" style="color: purple; text-decoration: underline;" class="">http://lists.openid.net/mailman/listinfo/openid-specs-fastfed</a><br class="">><br class="">_______________________________________________<br class="">Openid-specs-fastfed mailing list<br class=""><a href="mailto:Openid-specs-fastfed@lists.openid.net" style="color: purple; text-decoration: underline;" class="">Openid-specs-fastfed@lists.openid.net</a><br class=""><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Dfastfed&d=DwMFAg&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=DIpWRxBqCD7w8EwTUg2e_V7cCV7Y6V3kXK3XSB3noFE&s=CKtWUoWymQjX9gEOwC-dFy_c8PDVB-q-VeSv4-okR5A&e=" target="_blank" style="color: purple; text-decoration: underline;" class="">http://lists.openid.net/mailman/listinfo/openid-specs-fastfed</a><o:p class=""></o:p></span></div></div></div></blockquote></div><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class=""><br class=""><br clear="all" class=""><o:p class=""></o:p></span></div><div class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class=""><o:p class=""> </o:p></span></div></div><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class="">--<span class="Apple-converted-space"> </span><o:p class=""></o:p></span></div><div class=""><div class=""><div class=""><div class=""><div class=""><div class=""><div style="margin: 0mm 0mm 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif;" class=""><span lang="EN-US" class="">Subscribe to the<span class="Apple-converted-space"> </span><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__hardtware.com_&d=DwMFAg&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=DIpWRxBqCD7w8EwTUg2e_V7cCV7Y6V3kXK3XSB3noFE&s=8GYjEynbbuK48Gw_TXnxihZ6XRKsw7zUZxad7rCTwdI&e=" target="_blank" style="color: purple; text-decoration: underline;" class="">HARDTWARE</a><span class="Apple-converted-space"> </span>mail list to learn about projects I am working on!<o:p class=""></o:p></span></div></div></div></div></div></div></div></div></div></blockquote></div></div></div></blockquote><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">_______________________________________________</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">Openid-specs-fastfed mailing list</span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="mailto:Openid-specs-fastfed@lists.openid.net" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">Openid-specs-fastfed@lists.openid.net</a><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Dfastfed&d=DwICAg&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=DIpWRxBqCD7w8EwTUg2e_V7cCV7Y6V3kXK3XSB3noFE&s=CKtWUoWymQjX9gEOwC-dFy_c8PDVB-q-VeSv4-okR5A&e=" style="color: purple; text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class="">https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Dfastfed&d=DwICAg&c=RoP1YumCXCgaWHvlZYR8PQcxBKCX5YTpkKY057SbK10&r=JBm5biRrKugCH0FkITSeGJxPEivzjWwlNKe4C_lLIGk&m=DIpWRxBqCD7w8EwTUg2e_V7cCV7Y6V3kXK3XSB3noFE&s=CKtWUoWymQjX9gEOwC-dFy_c8PDVB-q-VeSv4-okR5A&e=</a><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class=""><span class="Apple-converted-space"> </span></span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""></div></blockquote></div><br class=""></div></div></div></body></html>