<div dir="ltr"><div dir="ltr">Hello All, <div><br></div><div>As requested, I have uploaded a use case proposal to the 'scenarios' folder of the shared drive titled "SSE Use Case - TWOSENSE.AI.docx".</div><div><br></div><div>All feedback is welcome, and I look forward to discussing it. <br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px"><br></div><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px">Cheers,<br></div><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px">-dawud <br><br>--<br>Dawud Gordon, PhD<br><a href="http://TWOSENSE.AI" target="_blank">TWOSENSE.AI</a> | CEO & Co-Founder<br></div><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px">195 Montague St, Brooklyn, NY 11201</div><div style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px"><a value="+18456523579" style="color:rgb(17,85,204)">+1 (845) 652 3579</a><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Aug 24, 2020 at 12:20 PM Atul Tulshibagwale <<a href="mailto:atultulshi@google.com">atultulshi@google.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi Tim,<div>I'd started working on this doc, but I haven't made much progress. I don't think I've uploaded the source to the repository.</div><div><br></div><div>We need to pick this up soon though. I was hoping to get clarity on the subject identifiers issue before progressing on this, but perhaps we can write the doc assuming we'll have subject categories in subject-identifiers and then modify it if things change.<br></div><div><br></div><div>Atul</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Aug 23, 2020 at 4:37 PM Tim Cappalli <<a href="mailto:Tim.Cappalli@microsoft.com" target="_blank">Tim.Cappalli@microsoft.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div>
<p class="MsoNormal"><span style="font-family:Arial,sans-serif">We don’t have an event type for “Session Events” (which I’d argue this is ultimately a session event), but I think this use case makes sense and should be added.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-family:Arial,sans-serif"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-family:Arial,sans-serif"><a id="gmail-m_6836705899512332593gmail-m_-1752203903660257992OWAAM036B2B4830D9DF49A5A6A85417DC5DE3" href="mailto:atultulshi@google.com" target="_blank"><span style="font-family:Arial,sans-serif;text-decoration:none">@Atul Tulshibagwale</span></a> are we still
just making proposed changes on this doc (</span><a href="https://docs.google.com/document/d/1jT12NVfmEryytrPMpQiCzfOXQ-8HfQFnLQStoSAbFhY/" target="_blank">https://docs.google.com/document/d/1jT12NVfmEryytrPMpQiCzfOXQ-8HfQFnLQStoSAbFhY/</a>)?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">tim<u></u><u></u></p>
<p class="MsoNormal"><span style="font-family:Arial,sans-serif"><u></u> <u></u></span></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(181,196,223);padding:3pt 0in 0in">
<p class="MsoNormal" style="margin-bottom:12pt"><b><span style="font-size:12pt;color:black">From:
</span></b><span style="font-size:12pt;color:black">Openid-specs-risc <<a href="mailto:openid-specs-risc-bounces@lists.openid.net" target="_blank">openid-specs-risc-bounces@lists.openid.net</a>><br>
<b>Date: </b>Friday, August 21, 2020 at 20:24<br>
<b>To: </b><a href="mailto:openid-specs-risc@lists.openid.net" target="_blank">openid-specs-risc@lists.openid.net</a> <<a href="mailto:openid-specs-risc@lists.openid.net" target="_blank">openid-specs-risc@lists.openid.net</a>><br>
<b>Subject: </b>Re: [Openid-specs-risc] Session Extension Event<u></u><u></u></span></p>
</div>
<div>
<div>
<p class="MsoNormal">Hey all, <u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I'm picking up a conversation we didn't get to on our last call.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I'm interested in finding a way to act as an agent-based trust provider. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Our customers want to set a shorter session, and only extend the session if there is a reason to trust it. Our endpoint agent supplies trust to a user/device/session, but is not a prerequisite for a connection. If the agent is not present,
the user can still access the system but is required to derisk the situation themselves and provide the "extra" trust required, for example with an MFA challenge every 30 mins. Customers actually see this as a motivation for their users to put security agents
on their BYOD devices (e.g. install us or an MDM). <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">This is why I'm advocating for a "Session Extension" event. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Is there another way to implement this using events that are already defined?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Otherwise I will draft the event and send that around for review before our next call. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Helvetica;color:black">Cheers,<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Helvetica;color:black">-dawud <br>
<br>
--<br>
Dawud Gordon, PhD<br>
<a href="https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftwosense.ai%2F&data=02%7C01%7Ctim.cappalli%40microsoft.com%7C197758652369492b68a308d84631acc3%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637336526461379556&sdata=o1%2BT%2BmhRMsREbhZ9DCqOFZdQwGu7GOl2i8s2jMvCybg%3D&reserved=0" target="_blank">TWOSENSE.AI</a> |
CEO & Co-Founder<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Helvetica;color:black">195 Montague St, Brooklyn, NY 11201<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Helvetica;color:black"><a href="tel:(845)%20652-3579" value="+18456523579" target="_blank">+1 (845) 652 3579</a><u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Tue, Aug 18, 2020 at 10:40 AM Dawud Gordon <<a href="mailto:dawud@twosense.ai" target="_blank">dawud@twosense.ai</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal">Hello All, <u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">On our last call, I proposed adding an event to extend a session for a user+device+session. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">My goal was to enable CAE to perform with an IdP with a short session configuration, where signals and events keep sessions open when trusted, rather than only closing them when risk is identified.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">This was met with some resistance and I understand that CAEP is designed for long sessions with external risk signals instead of trust signals. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">From my perspective, we would only need one component for CAEP to support both modalities, which would be an event to push a trust-based session extension signal from a 3rd party to the IdP. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Without this, it would be an IdP specific implementation outside of CAEP. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Are there previous discussions on this I can catch up on? Or any blatant reasons I'm overlooking why this is a bad idea? <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks!<br clear="all">
<u></u><u></u></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Helvetica;color:black"><u></u> <u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Helvetica;color:black">Cheers,<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Helvetica;color:black">-dawud <br>
<br>
--<br>
Dawud Gordon, PhD<br>
<a href="https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Ftwosense.ai%2F&data=02%7C01%7Ctim.cappalli%40microsoft.com%7C197758652369492b68a308d84631acc3%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637336526461389549&sdata=Zzxrvz1So5zRzyg9HOcWkfd81MpDhZ1zYYMgmEY5PSI%3D&reserved=0" target="_blank">TWOSENSE.AI</a> |
CEO & Co-Founder<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Helvetica;color:black">195 Montague St, Brooklyn, NY 11201<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9pt;font-family:Helvetica;color:black"><a href="tel:(845)%20652-3579" value="+18456523579" target="_blank">+1 (845) 652 3579</a><u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><img border="0" width="1" height="1" style="width: 0.0104in; height: 0.0104in;" id="gmail-m_6836705899512332593gmail-m_-1752203903660257992_x0000_i1025"><u></u><u></u></p>
</div>
</div>
</div>
</blockquote></div>
</blockquote></div><img src="https://t.sidekickopen82.com/s1t/o/5/f18dQhb0S7ks8dDMPbW2n0x6l2B9gXrN7sKj6v4f8hHW2zGqrd8p-RPbN1qwqjKQFLCHW5F_09j1k1H6H0?si=4972286780243968&pi=e6d658c9-6c38-4fcc-8234-08b82ad913f4&ti=null" alt="" style="display:none!important" height="1" width="1"></div>