<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Arial" size="2"><span style="font-size:10pt;">
<div>Dear all,</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div>Please find below the preliminary notes of our MODRNA meeting on July 12th 2017.</div>
<div>In case of error or misunderstanding, let me know.</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><u>Partici</u><u>pants:</u></div>
<a name="BM_BEGIN"></a>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Nicolas, Keith, Bjorn, Siva, Dave Tonge, Jörg</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"><u>Agenda</u></span></font></div>
<ol style="margin:0;padding-left:18pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Roll Call and Adoption of the Agenda [Bjorn/John]</li></span></font>
</ol>
<ol start="2" style="margin:0;padding-left:17.85pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Liaisons Updates</li></span></font>
</ol>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">GSMA CIBA input [Siva]</span></font></div>
<ol start="3" style="margin:0;padding-left:17.85pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><a href="https://bitbucket.org/openid/fapi/src/7d428a93d30d14848d5b10de73a95243cd88260b/Financial_API_WD_CIBA.md?fileviewer=file-view-default"><u>FAPI Profile for CIBA</u></a></li><li>Issue Tracker [All]</li></span></font>
</ol>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><a href="https://bitbucket.org/openid/mobile/issues/1/context-service-provider-wants-to"><u>#1</u></a> [Jörg]</li><li style="margin-top:5pt;margin-bottom:5pt;"><a href="https://bitbucket.org/openid/mobile/issues/31/how-to-react-if-login_hint-and"><u>#31</u></a> [Jörg]</li><li style="margin-top:5pt;margin-bottom:5pt;"><a href="https://bitbucket.org/openid/mobile/issues/54/ciba-client-notification-endpoint"><u>#54</u></a> Status on feedback from FAPI? [Axel]</li><li style="margin-top:5pt;margin-bottom:5pt;"><a href="https://bitbucket.org/openid/mobile/issues/55/ciba-signed-result-objects"><u>#55</u></a> Status on feedback from FAPI? [Axel]</li><li style="margin-top:5pt;margin-bottom:5pt;"><a href="https://bitbucket.org/openid/mobile/issues/56/signed-request-object-authentication"><u>#56</u></a></li><li style="margin-top:5pt;margin-bottom:5pt;"><a href="https://bitbucket.org/openid/mobile/issues/52/ciba-pairwise-identifiers-structuring-text"><u>#52</u></a></li></span></font>
</ul>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><a href="https://bitbucket.org/openid/mobile/issues/57/client-initiated-backend-authentication"><u>#57</u></a></li></span></font>
</ul>
<ol start="5" style="margin:0;padding-left:18pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>CPAS-MODRNA Alignment Call</li><li>AOB</li></span></font>
</ol>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"><u>Discussion</u></span></font></div>
<ol style="margin:0;padding-left:18pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Roll Call and Adoption of the Agenda [Bjorn/John]</li></span></font>
</ol>
<div style="margin-top:5pt;margin-bottom:5pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Adopted</span></font></div>
<ol start="2" style="margin:0;padding-left:17.85pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Liaisons Updates, GSMA CIBA input [Siva]</li></span></font>
</ol>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">CPAS has approved BC CIBA profile, with some particularities:</span></font></div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>The support of several notification URIs at registration</li><li>A response_type value is introduced for BC.</li><li>Some FC parameters are removed</li><li>ID Token is completed with a new field concerning the recipient</li><li>A notification for acknowledgement is added</li><li>Error handling at IDGW and SP sides</li><li>Usage of Context, client_name and binding message</li><li>Future Signature of request object</li><li>FC parameters to be removed</li><li>Polling is removed</li></span></font>
</ul>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol start="3" style="margin:0;padding-left:17.85pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><a href="https://bitbucket.org/openid/fapi/src/7d428a93d30d14848d5b10de73a95243cd88260b/Financial_API_WD_CIBA.md?fileviewer=file-view-default"><u>FAPI Profile for CIBA</u></a> (dave tonge)</li></span></font>
</ol>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Status update made by Dave, with the wish to avoid adherences between different specs.</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">The FAPI profile is under construction, one for BC and one for FC.</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Question about security: bot mutual TLS and Token binding are possible, and signature of messages is requested.</span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol start="4" style="margin:0;padding-left:17.85pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Issue Tracker [All]</li></span></font>
</ol>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><a href="https://bitbucket.org/openid/mobile/issues/1/context-service-provider-wants-to"><u>#1</u></a> [Jörg]</li></span></font>
</ul>
<ul style="margin:0;padding-left:72pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;">Discussions with Gonzalo about UQ API. Fixed the binding message parameter in the authentication spec, Jörg proposes to close this after moving remaining into UQ spec.</li><li style="margin-top:5pt;margin-bottom:5pt;"><font face="Wingdings">ā</font> Nicolas: to post a comment in issue 1 to say it’s resolved in UQ API.</li></span></font>
</ul>
<ul style="margin:0;padding-left:35.7pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><a href="https://bitbucket.org/openid/mobile/issues/31/how-to-react-if-login_hint-and"><u>#31</u></a> [Jörg]</li></span></font>
</ul>
<ul style="margin:0;padding-left:53.4pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>How to react with authentication spec service when login hint and login hint token are both provided ? Ignore the login hint, or throw an error ? The SP can start with a login_hint, and the discovery service can add a login_hint_token.</li></span></font>
</ul>
<ul style="margin:0;padding-left:89.4pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Consensus in the group to throw an error if both are present, comments are awaited on the list. To be closed at the next call.</li></span></font>
</ul>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li style="margin-top:5pt;margin-bottom:5pt;"><a href="https://bitbucket.org/openid/mobile/issues/54/ciba-client-notification-endpoint"><u>#54</u></a> Status on feedback from FAPI? [Axel]</li><li style="margin-top:5pt;margin-bottom:5pt;">Still open</li><li><a href="https://bitbucket.org/openid/mobile/issues/55/ciba-signed-result-objects"><u>#55</u></a> Status on feedback from FAPI? [Axel]</li></span></font>
</ul>
<div style="text-indent:35.4pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Still open</span></font></div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><a href="https://bitbucket.org/openid/mobile/issues/56/signed-request-object-authentication"><u>#56</u></a></li></span></font>
</ul>
<div style="text-indent:35.4pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Still open</span></font></div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><a href="https://bitbucket.org/openid/mobile/issues/52/ciba-pairwise-identifiers-structuring-text"><u>#52</u></a></li></span></font>
</ul>
<div style="text-indent:35.4pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Still open</span></font></div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li><a href="https://bitbucket.org/openid/mobile/issues/57/client-initiated-backend-authentication"><u>#57</u></a></li></span></font>
</ul>
<div style="text-indent:35.4pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Tight to #52, Still open</span></font></div>
<div style="text-indent:35.4pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">#58 added</span></font></div>
<div style="text-indent:35.4pt;"><font face="Calibri" size="2"><span style="font-size:11pt;">Include the issuer response during registration, to be discussed off-line</span></font></div>
<div style="text-indent:35.4pt;"><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol start="5" style="margin:0;padding-left:18pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>CPAS-MODRNA Alignment Call</li></span></font>
</ol>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Scheduled on July 24th</span></font></div>
<ul style="margin:0;padding-left:36pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>Bjorn to send a note to the group to see whether another time slot to choose due to agenda conflicts.</li></span></font>
</ul>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<ol start="6" style="margin:0;padding-left:18pt;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li>AOB</li></span></font>
</ol>
<ol start="3" style="margin:0;">
<font face="Calibri" size="2"><span style="font-size:11pt;">
<li> </li></span></font>
</ol>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;">Kind regards,</span></font></div>
<div>Philippe</div>
<div><font face="Calibri" size="2"><span style="font-size:11pt;"> </span></font></div>
</span></font>
<PRE>_________________________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
This message and its attachments may contain confidential or privileged information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified.
Thank you.
</PRE></body>
</html>