[Openid-specs-igov] [E] iGov and SSA eCBSV

Tue Sep 22 15:37:34 UTC 2020

Just checking to see if there has been any progress on any input to the
iGov use cases and/or further details available on the SSA implementation
of OpenID Connect?

BR,
Bjorn

On Wed, Jul 8, 2020 at 5:55 PM Don Thibeau <don at oidf.org> wrote:

> Adding Jeff Shultz at GSA to this thread
>
> On Jun 25, 2020, at 2:47 AM, Hjelm, Bjorn <Bjorn.Hjelm at VerizonWireless.com>
> wrote:
>
> Ray,
> I believe your input would be great for the iGov WG. The WG has documented use
> cases
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__xml2rfc.tools.ietf.org_cgi-2Dbin_xml2rfc.cgi-3FSubmit-3DSubmit-26format-3Dascii-26mode-3Dhtml-26type-3Dascii-26url-3Dhttps-3A__bitbucket.org_openid_igov_raw_master_igov-2Dprofile-2Duse-2Dcases.xml&d=DwMGaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=tfdN208Vrsnt79OqtYF2dnfz_x9ZlgkDou91aO53cl8&s=vmBuWFQYioxOwVMU3IxohbWnBQ-mPmXan46yVcjhOkY&e=>
> that might be worth revisiting (for the SSA use case) in addition to
> reviewing the iGov Profile for OAuth 2.0
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__openid.net_specs_openid-2Digov-2Doauth2-2D1-5F0-2D03.html&d=DwMGaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=tfdN208Vrsnt79OqtYF2dnfz_x9ZlgkDou91aO53cl8&s=PFLZ1lcYLuyPFs8S-e2GWuMWwPhMUOn10Cq9tdFzeBA&e=>
> and iGov Profile for OpenID Connect
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__openid.net_specs_openid-2Digov-2Dopenid-2Dconnect-2D1-5F0-2D03.html&d=DwMGaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=tfdN208Vrsnt79OqtYF2dnfz_x9ZlgkDou91aO53cl8&s=qIt1f47fcT73_NB7J47VaIM91oiQ1Y0OwSBDW86AkKc&e=>
> specifications.
>
> BR,
> Bjorn
>
>
> On Wed, Jun 24, 2020 at 3:19 PM Ray Gauss <rgauss at easydynamics.com> wrote:
>
>> Hi Bjorn,
>>
>>
>>
>> I was on a call last month with Don but I don’t believe you and I have
>> talked, nice to meet you.
>>
>>
>>
>> I’ve only been involved in the project for a few months now but
>> understand the eCBSV OIDC technical requirements and would be very
>> interested in becoming more involved in the iGov working group.  I’ve
>> subscribed to the list and added the recurring meeting to my calendar.
>>
>>
>>
>> I’d like to go through the iGov spec in more detail and document what SSA
>> would need to change to support it, and what from SSA’s requirements might
>> be valuable additions to the iGov Spec in the future.  I’m not sure I’ll
>> have the capacity to complete that before the next meeting (Jul 7) but will
>> certainly work towards it.
>>
>>
>>
>> Thanks,
>>
>>
>>
>> Ray
>>
>>
>>
>>
>>
>> *From: *Maria Vachino <mvachino at easydynamics.com>
>> *Date: *Wednesday, June 24, 2020 at 5:26 PM
>> *To: *Ray Gauss <rgauss at easydynamics.com>, "Pranav A. Kothare" <
>> pkothare at easydynamics.com>
>> *Subject: *FW: [E] RE: [Openid-specs-igov] iGov and SSA eCBSV
>>
>>
>>
>> Thoughts?
>>
>>
>>
>> *From:* Bjorn Hjelm <bjorn.hjelm at verizonwireless.com>
>> *Sent:* Tuesday, June 23, 2020 10:49 PM
>> *To:* Maria Vachino <mvachino at easydynamics.com>
>> *Cc:* Don Thibeau <don at oidf.org>
>> *Subject:* Re: [E] RE: [Openid-specs-igov] iGov and SSA eCBSV
>>
>>
>>
>> Maria,
>>
>> I think this would be a great discussion topic for the iGov WG to ensure
>> that the work within the WG aligns with the requirements.
>>
>> BR,
>>
>> Bjorn
>>
>>
>>
>>
>> On Jun 23, 2020, at 7:18 PM, Maria Vachino <mvachino at easydynamics.com>
>> wrote:
>>
>> Bjorn & Don,
>>
>>
>>
>> Unfortunately, the eCBSV technical specification was not designed to
>> conform to the iGov specification. SSA had to design their first
>> specification around the limitations of their current product suite.
>> However, there will be an opportunity to revisit the implementation when
>> SSA upgrades to a more modern stack which may be as soon as 18 months from
>> now:
>> https://etc.g2xchange.com/statics/ssa-rfi-customer-identity-credential-and-access-management-solution/
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__etc.g2xchange.com_statics_ssa-2Drfi-2Dcustomer-2Didentity-2Dcredential-2Dand-2Daccess-2Dmanagement-2Dsolution_&d=DwMGaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=abH61HX2WonO4GxKF5JqoDOK6W_3UbVZ3PUsfodcmkM&s=TY0FiQupkx1mzrPNzMzABH2fsiu8KzPa_nXoAlu0jfI&e=>
>>
>>
>>
>> Thanks,
>> Maria
>>
>>
>>
>> *From:* Don Thibeau <don at oidf.org>
>> *Sent:* Tuesday, June 23, 2020 2:40 PM
>> *To:* Maria Vachino <mvachino at easydynamics.com>
>> *Cc:* Bjorn Hjelm <bjorn.hjelm at verizonwireless.com>
>> *Subject:* Re: [Openid-specs-igov] iGov and SSA eCBSV
>>
>>
>>
>> Maria?
>>
>>
>>
>> On Jun 23, 2020, at 2:39 PM, Hjelm, Bjorn via Openid-specs-igov <
>> openid-specs-igov at lists.openid.net> wrote:
>>
>>
>>
>> This question is for any of the iGov working group members.
>>
>>
>>
>> The U.S. Social Security Administration (SSA) is launching an electronic
>> Consent Based Social Security Number (eCBSV) Service
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ssa.gov_dataexchange_eCBSV_index.html&d=DwMGaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=abH61HX2WonO4GxKF5JqoDOK6W_3UbVZ3PUsfodcmkM&s=wfMWczVcN5PWdkr8P6G1wro59ig7UGd7XvexbAdDrL0&e=>
>> and the eCBSV Technical information page
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ssa.gov_dataexchange_eCBSV_technical-5Finformation.html&d=DwMGaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=abH61HX2WonO4GxKF5JqoDOK6W_3UbVZ3PUsfodcmkM&s=yBE69Xp_g4Yg-Yls0jwJ1n4kj56mkbREnMwMaFbcfqY&e=>
>> states that "SSA will provide an OpenID Connect and OAuth 2.0 solution
>> for authentication and authorization to SSA’s Verification API."
>>
>>
>>
>> Does anyone on this list know if the eCBSV technical implementation
>> leverages any of the work done by the iGov working group?
>>
>>
>> BR,
>>
>> Bjorn
>>
>> _______________________________________________
>> Openid-specs-igov mailing list
>> Openid-specs-igov at lists.openid.net
>> http://lists.openid.net/mailman/listinfo/openid-specs-igov
>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openid.net_mailman_listinfo_openid-2Dspecs-2Digov&d=DwMGaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=abH61HX2WonO4GxKF5JqoDOK6W_3UbVZ3PUsfodcmkM&s=KXEjrv0-dN7BPK72A-a6gTytp9pgE805OYBa41uDzqg&e=>
>>
>>
>>
>> --
>> Don Thibeau : Executive Director, OpenID Foundation
>> Email: don at oidf.org <don at oidf.org>
>>
>> Voice: +1 202.841.8222
>> https://openid.net/foundation
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__openid.net_foundation&d=DwMGaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=abH61HX2WonO4GxKF5JqoDOK6W_3UbVZ3PUsfodcmkM&s=opgVU03jNWUZrDO-nAQl7ARtGWyQi83RzDw6_XzihlY&e=>
>>
>>
>>
>>
> --
> Don Thibeau : Executive Director, OpenID Foundation
> Email: don at oidf.org <don at oidf.org>
> Voice: +1 202.841.8222
> https://openid.net/foundation
> <https://urldefense.proofpoint.com/v2/url?u=https-3A__openid.net_foundation&d=DwMGaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=NMZJHCV8pjvGIH2fTx9z6l7g7-V-a2xW7ISf9uHdz0A&m=tfdN208Vrsnt79OqtYF2dnfz_x9ZlgkDou91aO53cl8&s=1lvHemt_6B4lSsLxG7siiXhmVfjUIHLoJOxb1JnA5Pg&e=>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs-igov/attachments/20200922/b151bf0e/attachment.html>