<div dir="ltr">Hi Yaron,<div>Thanks for the suggestion, I will start a new thread for each topic. Just FYI as background: We have discussed these changes in the OpenID Shared Signals and Events group, but happy to discuss them here again.</div><div><br></div><div>Atul</div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Jul 13, 2020 at 1:44 AM Yaron Sheffer <<a href="mailto:yaronf.ietf@gmail.com">yaronf.ietf@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="EN-US"><div><p class="MsoNormal">Hi Atul,<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Thank you for your contribution!<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">You are introducing 3-4 new concepts into this draft (including the notion of “conformance” which you have not listed below). I think it would be more appropriate to start an email thread on this list on each one, in order to gauge the working group’s interest. In general the IETF reserves the PR process for smaller, editorial changes, or else for changes that had already been discussed by the mailing list.<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">Thanks,<u></u><u></u></p><p class="MsoNormal"> Yaron<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(181,196,223);padding:3pt 0in 0in"><p class="MsoNormal"><b><span style="font-size:12pt;color:black">From: </span></b><span style="font-size:12pt;color:black">Id-event <<a href="mailto:id-event-bounces@ietf.org" target="_blank">id-event-bounces@ietf.org</a>> on behalf of Atul Tulshibagwale <atultulshi=<a href="mailto:40google.com@dmarc.ietf.org" target="_blank">40google.com@dmarc.ietf.org</a>><br><b>Date: </b>Monday, July 13, 2020 at 05:38<br><b>To: </b><<a href="mailto:id-event@ietf.org" target="_blank">id-event@ietf.org</a>>, Openid-specs-risc <<a href="mailto:openid-specs-risc@lists.openid.net" target="_blank">openid-specs-risc@lists.openid.net</a>><br><b>Cc: </b>Annabelle Richard <<a href="mailto:richanna@amazon.com" target="_blank">richanna@amazon.com</a>>, Marius Scurtescu <<a href="mailto:marius.scurtescu@coinbase.com" target="_blank">marius.scurtescu@coinbase.com</a>>, michaeljones_fwd <<a href="mailto:Michael.Jones@microsoft.com" target="_blank">Michael.Jones@microsoft.com</a>><br><b>Subject: </b>[Id-event] SSE changes to the Subject Identifiers Spec<u></u><u></u></span></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Hi all,<u></u><u></u></p><div><p class="MsoNormal">We've made a number of changes to the subject-identifiers spec in the OpenID "Shared Signals and Events" working group. I have incorporated these changes in a pull request to the present draft in the repository <a href="https://github.com/richanna/secevent" target="_blank">https://github.com/richanna/secevent</a>.<u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Please review the changes here:<u></u><u></u></p></div><div><p class="MsoNormal"><a href="https://github.com/richanna/secevent/pull/1" target="_blank">https://github.com/richanna/secevent/pull/1</a><u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Summary of the changes:<u></u><u></u></p></div><div><ol start="1" type="1"><li class="MsoNormal">Defined "Subject Principals" as management entities that are represented by the subject identifiers<u></u><u></u></li><li class="MsoNormal">Defined "Subject Principal Administrative Groupings" or SPAGs that may be used for certain events that pertain to the entire grouping. IRL Spags may be tenants in a multi-tenanted host or may be OUs or groups within a tenant.<u></u><u></u></li><li class="MsoNormal">Defined the following Common Claims that may be applied to any subject identifier:<u></u><u></u></li></ol><ol start="3" type="1"><ol start="1" type="1"><li class="MsoNormal">spag_id: An optional claim that can be used to ensure uniqueness of the subject identifier within the SPAG.<u></u><u></u></li><li class="MsoNormal">category: An optional claim that can be used to define the scope of the subject identifier. E.g., Does a phone number represent the user or the device the user is using. The category can disambiguate this.<u></u><u></u></li></ol></ol><ol start="4" type="1"><li class="MsoNormal">Added a SAML subject identifier type as was needed by some use cases in SSE.<u></u><u></u></li><li class="MsoNormal">Added myself as a co-author, given the scope of these changes.<u></u><u></u></li></ol><div><p class="MsoNormal">Thanks,<u></u><u></u></p></div></div><div><p class="MsoNormal">Atul<u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div></div><p class="MsoNormal">_______________________________________________ Id-event mailing list <a href="mailto:Id-event@ietf.org" target="_blank">Id-event@ietf.org</a> <a href="https://www.ietf.org/mailman/listinfo/id-event" target="_blank">https://www.ietf.org/mailman/listinfo/id-event</a> <u></u><u></u></p></div></div>
</blockquote></div>