<head>
<style>
code {
font-family: SFMono-Regular, Menlo, Consolas, "PT Mono", "Liberation Mono", Courier, monospace;
}
p {
min-height: 19.5px; /* Set a minimum height so empty p tags still take up vertical space; matches gmail empty line height */
border-radius: 0px;
}
ol.custom-editor-ordered-list-class {
padding-inline-start: 0px;
margin: 1px 0px;
padding-inline-start: 24px;
min-height: calc(1.5em + 6px);
}
ul.custom-editor-bullet-list-class {
padding-inline-start: 0px;
margin: 1px 0px;
padding-inline-start: 24px;
min-height: calc(1.5em + 6px);
}
pre.custom-editor-code-block-class {
flex-shrink: 1;
text-align: left;
font-family: SFMono-Regular, Menlo, Consolas, "PT Mono", "Liberation Mono", Courier, monospace;
font-size: 13.6px;
tab-size: 2;
padding: 34px 16px 32px 32px;
min-height: 1em;
white-space: pre;
border-radius: 4px;
text-align: left;
position: relative;
background: rgba(135,131,120,.15);
min-width: 0px;
width: 100%;
box-sizing: border-box;
}
hr.custom-editor-divider-class {
border: none;
border-top: 1px solid rgba(135,131,120,.15);
width: 100%;
}
blockquote {
border-left: 3px solid currentcolor;
padding-inline-start: 14px;
margin: 0px;
margin-top: 4px;
font-size: 1em;
padding-right: 2px;
padding-top: 3px;
padding-bottom: 3px;
padding-left: 14px;
}
blockquote.light {
border-left-color: rgba(55, 53, 47, 0.16);
}
blockquote.dark {
border-left-color: rgba(255, 255, 255, 0.13);
}
aside {
display: flex;
width: 100%;
max-width: 100%;
box-sizing: border-box;
border-radius: 4px;
background: rgba(135,131,120,.15);
padding: 16px 16px 16px 12px;
white-space: pre-wrap;
word-break: break-word;
}
.callout-emoji {
user-select: none;
display: flex;
align-items: center;
justify-content: center;
height: 24px;
width: 24px;
font-size: 21.6px;
box-sizing: border-box;
margin-top: -3px;
border-radius: 0.25em;
flex-shrink: 0;
flex-grow: 0;
}
.callout-emoji > img {
height: 18px;
width: 18px;
margin-top: auto;
margin-bottom: auto;
}
.callout-content {
margin-left: 8px;
margin-top: auto;
display: table;
width: 100%;
}
.custom-editor-task-list-class {
list-style: none;
padding: 0;
margin: 0;
}
.custom-editor-task-item-class {
display: flex;
align-items: center;
}
.custom-editor-task-item-class > label {
margin-right: 0.5rem;
cursor: pointer;
user-select: none;
display: flex;
align-items: center;
}
.custom-editor-task-item-class > label > input[type="checkbox"] {
margin-right: 0.5rem;
}
.custom-editor-task-item-checked-class > * {
text-decoration: line-through rgba(55, 53, 47, 0.42);
color: rgba(55, 53, 47, 0.65);
}
.custom-editor-rendered-mention {
opacity: 0.6;
color: unset;
}
.custom-editor-rendered-mention > a {
color: unset;
}
.custom-editor-rendered-mention-page {
font-weight: 500;
max-width: 200px;
}
.custom-editor-rendered-mention-page > a {
color: unset;
}
.custom-editor-rendered-mention-page-link {
border-bottom: 0.05em solid rgba(95, 94, 91, 1);
text-decoration: none !important;
}
pre {
flex-shrink: 1;
text-align: left;
font-family: SFMono-Regular, Menlo, Consolas, "PT Mono", "Liberation Mono", Courier, monospace;
font-size: 13.6px;
tab-size: 2;
padding: 34px 16px 32px 32px;
min-height: 1em;
white-space: pre;
border-radius: 4px;
text-align: left;
position: relative;
background: rgb(247, 246, 243);
min-width: 0px;
width: 100%;
box-sizing: border-box;
text-wrap: wrap;
}
a.custom-editor-link-class {
color: rgba(120, 119, 116, 1);
cursor: pointer;
text-decoration-thickness: 0.05em;
text-underline-offset: 3px;
}
</style>
<style>
* {
-webkit-tap-highlight-color: rgba(0, 0, 0, 0);
-webkit-font-smoothing: antialiased;
line-height: 1.3;
font-family: ui-sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI", Helvetica, "Apple Color Emoji", Arial, sans-serif, "Segoe UI Emoji", "Segoe UI Symbol";
}
p {
margin: 0px 0px 0px 0px !important;
}
</style>
</head>
<body>
<p dir="auto">Monika,</p><p dir="auto"></p><p dir="auto">For all intents and purposes, FastFed is no longer operational as a WG. No large provider committed to implementation of the spec. Although there have been a few attempts to revive FastFed and implement it for other protocols such as SCIM, I have not seen anything that indicate such efforts will be successful.</p><p dir="auto"></p><p dir="auto">Andrii mentioned the IPSIE WG, which I co-chair, in his email. While IPSIE WG is tackling enterprise profiles of common standards, we have not discussed any profiles of FastFed to date. This doesn’t mean we won’t do any work with FastFed, but we have none planned at this time.</p><p dir="auto"></p><p dir="auto">Thanks,</p><p dir="auto">-dhs</p><p dir="auto"></p><blockquote dir="auto" class="notion-mail-quote custom-editor-blockquote-class"><p dir="auto">On Fri, 27 Jun 2025 05:53:23 GMT Monika Avalur via Openid-specs-fastfed wrote:</p><div dir="auto" class="elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto">Thanks <a target="_blank" rel="noopener noreferrer nofollow" class="custom-editor-link-class tWKOu mention ms-bgc-nlr ms-fcl-b" href="mailto:andrii.deinega@gmail.com">@Andrii Deinega</a>.</p></div><div dir="auto" class="elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto"><br></p></div><div dir="auto" class="elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto">I will take a look at them.</p></div><div dir="auto" class="elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto"><br></p></div><div dir="auto" class="elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto">Regards,</p></div><div dir="auto" class="elementToProof" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto">Monika</p></div><div dir="auto"></div><hr class="custom-editor-divider-class"><div dir="auto"><p dir="auto"><strong>From:</strong> Andrii Deinega <<a href="mailto:andrii.deinega@gmail.com">andrii.deinega@gmail.com</a>><br><strong>Sent:</strong> Friday, June 27, 2025 6:54 AM<br><strong>To:</strong> Monika Avalur <<a href="mailto:Monika.Avalur@cyberark.com">Monika.Avalur@cyberark.com</a>><br><strong>Cc:</strong> <a href="mailto:openid-specs-fastfed@lists.openid.net">openid-specs-fastfed@lists.openid.net</a> <<a href="mailto:openid-specs-fastfed@lists.openid.net">openid-specs-fastfed@lists.openid.net</a>>; Dick Hardt <<a href="mailto:dick.hardt@gmail.com">dick.hardt@gmail.com</a>><br><strong>Subject:</strong> Re: [Openid-specs-fastfed] Introduction and some questions!!</p><div dir="auto"><p dir="auto"> </p></div></div><div dir="auto"><table align="left" border="0" cellpadding="0" cellspacing="0" width="100%" style="height:20px;width:100%;font-family:Calibri;font-size:16px"><colgroup><col style="min-width:0px"><col style="min-width:0px"></colgroup><tbody><tr style="height:20px"><td colspan="1" rowspan="1" style="background:rgb(255,185,0);padding:5pt 2pt;height:54px;background-color:rgb(255,185,0)"><p dir="auto"> </p></td><td colspan="1" rowspan="1" width="100%" style="background:rgb(255,248,229);padding:5pt 4pt 5pt 12pt;height:20px;background-color:rgb(255,248,229)"><div dir="auto" style="color:rgb(34,34,34)"><p dir="auto"><span style="color:#ff0000;font-weight:bold"><strong>CyberArk Security Warning:</strong></span> This is an external email!</p></div></td></tr></tbody></table><p dir="auto" style="margin-top:0px;margin-bottom:0px"> </p><div dir="auto"><div dir="auto"><p dir="auto">Hi Monika,</p><div dir="auto"><p dir="auto"><br></p></div><div dir="auto"><p dir="auto">I believe you introduced yourself at today's meeting (<a target="_blank" rel="noopener noreferrer nofollow" class="custom-editor-link-class" href="https://urldefense.com/v3/__https://openid.net/wg/connect/__;!!Pe07N362zA!wANZC_iCk7tiK1dYAQNAY0ihdavsn8N0tsLucJpsQoksYpO9HLE4a5-j16-BFaJZCA3OnHGEeF8m8OoF9jbsCFPyUAKYqg$">AB Connect Working Group</a>).</p></div><div dir="auto"><p dir="auto"><br></p></div><div dir="auto"><p dir="auto">Not sure if it's safe to say this... but it seems like that this email list hasn't been very active for the past several years. I do love all the ideas behind FastFed, and hear you on this for sure (these things become very visible when you do these things at any scale and maybe, you want to automate that).</p></div><div dir="auto"><p dir="auto"><br></p></div><div dir="auto"><p dir="auto">I won't tell you anything concrete about your first question (SCIM + FastFed), but I'd suggest you reach out to <a target="_blank" rel="noopener noreferrer nofollow" class="custom-editor-link-class" href="https://urldefense.com/v3/__https://datatracker.ietf.org/wg/scim/about/__;!!Pe07N362zA!wANZC_iCk7tiK1dYAQNAY0ihdavsn8N0tsLucJpsQoksYpO9HLE4a5-j16-BFaJZCA3OnHGEeF8m8OoF9jbsCFOsKicLdQ$">https://datatracker.ietf.org/wg/scim/about/</a> directly.</p></div><div dir="auto"><p dir="auto"><br></p></div><div dir="auto"><p dir="auto">For machine identities there is a separate group called WIMSE (Workload Identity in Multi System Environments), this group has been very active recently. Have a look at <a target="_blank" rel="noopener noreferrer nofollow" class="custom-editor-link-class" href="https://urldefense.com/v3/__https://datatracker.ietf.org/wg/wimse/about__;!!Pe07N362zA!wANZC_iCk7tiK1dYAQNAY0ihdavsn8N0tsLucJpsQoksYpO9HLE4a5-j16-BFaJZCA3OnHGEeF8m8OoF9jbsCFOrAOQGNA$">https://datatracker.ietf.org/wg/wimse/about</a> for what they are working on.</p></div><div dir="auto"><p dir="auto"><br></p></div><div dir="auto"><p dir="auto">There are also a couple of (draft) specifications like <a target="_blank" rel="noopener noreferrer nofollow" class="custom-editor-link-class" href="https://urldefense.com/v3/__https://openid.net/specs/openid-provider-commands-1_0.html__;!!Pe07N362zA!wANZC_iCk7tiK1dYAQNAY0ihdavsn8N0tsLucJpsQoksYpO9HLE4a5-j16-BFaJZCA3OnHGEeF8m8OoF9jbsCFMUttg_tw$">OpenID Provider Commands</a> and <a target="_blank" rel="noopener noreferrer nofollow" class="custom-editor-link-class" href="https://urldefense.com/v3/__https://openid.net/specs/openid-connect-enterprise-extensions-1_0.html__;!!Pe07N362zA!wANZC_iCk7tiK1dYAQNAY0ihdavsn8N0tsLucJpsQoksYpO9HLE4a5-j16-BFaJZCA3OnHGEeF8m8OoF9jbsCFOdIoj5Iw$">Enterprise Extensions</a> from Dick Hardt, and a separate <a target="_blank" rel="noopener noreferrer nofollow" class="custom-editor-link-class" href="https://urldefense.com/v3/__https://openid.net/wg/ipsie__;!!Pe07N362zA!wANZC_iCk7tiK1dYAQNAY0ihdavsn8N0tsLucJpsQoksYpO9HLE4a5-j16-BFaJZCA3OnHGEeF8m8OoF9jbsCFPs7_J9IA$">working group</a> focused on "The Interoperability Profiling for Secure Identity in the Enterprise" that you might find interesting, due to their overlap (at some degree.. if I may) with the FastFed.</p></div><div dir="auto"><p dir="auto"><br></p></div><div dir="auto"><p dir="auto">All the best,</p></div><div dir="auto"><p dir="auto">Andrii</p></div><div dir="auto"><p dir="auto"><br></p></div><div dir="auto"></div></div><p dir="auto"><br></p><div dir="auto" class="x_gmail_quote x_gmail_quote_container"><div dir="auto" class="x_gmail_attr"><p dir="auto">On Thu, Jun 26, 2025 at 9:39 AM Monika Avalur via Openid-specs-fastfed <<a target="_blank" rel="noopener noreferrer nofollow" class="custom-editor-link-class" href="mailto:openid-specs-fastfed@lists.openid.net">openid-specs-fastfed@lists.openid.net</a>> wrote:<br></p></div><blockquote dir="auto" class="custom-editor-blockquote-class"><div dir="auto" class="x_msg6343280204511546534"><div dir="auto"><div dir="auto" style="margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto">Hi,</p></div><div dir="auto" style="margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto"><br></p></div><div dir="auto" style="margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto">I am Monika Avalur working as a product manager in IAM space in CyberArk. I have been assigned to this working group and have been going through the specs for FastFed.</p></div><div dir="auto" style="margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto"><br></p></div><div dir="auto" style="margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto">Firstly I love FastFed as I am able to echo the pain in setting up federation with all that Schema mapping.</p></div><div dir="auto" style="margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto"><br></p></div><div dir="auto" style="margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto">I have couple of questions/suggestion/use cases I see today that I would want to share with this group to check if we are doing anything in those terms.</p></div><div dir="auto" style="margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto"><br></p></div><ol class="custom-editor-ordered-list-class" dir="auto"><li dir="auto"><p dir="auto">Extending SCIM to sync any generic entities. i.e., today only users and groups can be provisioned using SCIM. Is there any plan to make this generic enough such that say certain app/device/AI agent/Org metadata can be provisioned or this data can be generically exchanged between two entities? This can extend to AI agents, machine identities etc.,</p></li><li dir="auto"><p dir="auto">I don't see this particular draft talking about federation of machine identities, could be workload identities/AI agents/service users etc., In this case we mostly use STS/OAuth client creds/MTLS based authentication. So do we plan on supporting them as well?</p></li></ol><div dir="auto" style="margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto"><br></p></div><div dir="auto" style="margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto">Thanks & Regards,</p></div><div dir="auto" style="margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto">Monika</p></div><div dir="auto" style="margin:0px;font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto"><br></p></div><div dir="auto" style="font-family:Aptos,Aptos_EmbeddedFont,Aptos_MSFontService,Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)"><p dir="auto"><br></p></div></div><p dir="auto"> _______________________________________________<br>Openid-specs-fastfed mailing list<br><a target="_blank" rel="noopener noreferrer nofollow" class="custom-editor-link-class" href="mailto:Openid-specs-fastfed@lists.openid.net">Openid-specs-fastfed@lists.openid.net</a><br><a target="_blank" rel="noreferrer" class="custom-editor-link-class" href="https://urldefense.com/v3/__https://lists.openid.net/mailman/listinfo/openid-specs-fastfed__;!!Pe07N362zA!wANZC_iCk7tiK1dYAQNAY0ihdavsn8N0tsLucJpsQoksYpO9HLE4a5-j16-BFaJZCA3OnHGEeF8m8OoF9jbsCFPITjwkNQ$">https://lists.openid.net/mailman/listinfo/openid-specs-fastfed</a><br></p></div></blockquote></div></div></div></blockquote>
</body>