WG tasks to discuss at the F2F Berlin
T1. Open source identity products directory
Goal
...
F2F Goals:
Complete a public directory of Open Source identity products in mapped to the scope of the Kantara workgroups
1. * Define categories of products in the scope of KI * According to technologies
* List technologies
*
Technologies :
- Cryptography
...
- HTTP server/Client
...
- XML, DTD, namespaces
...
- XML signature or encryption
...
- WS-Security
...
- SAML
...
- OpenID
...
- OAuth
...
- UMA
...
- WS-Trust
...
- ID-WSF
...
- X509
...
- XACML PDP
...
- XACML PEP
* Access control policy definition 2. Define Access Control policy (allowing definition of WS-policy or XACML documents) *
- Privacy policy definition (allowing definition of P3P documents)
...
- LDAP directories
...
- LDAP meta-directoty/synchronization
...
- Identity backends (LDAP, DB, text files) synchronization
...
- SPML
* (Define if it is an open specifications, which IPR.) *
- List certifications
...
- According to functionalities (we must define)
...
- IdP (may be SAML, openID, STS)
...
- Identity selectors, claims-agent, Identity-in the-cloud agent, etc.
* Define for each characteristics for evaluation
* eg. Characteristics for evaluation :
- SAML: IdP/SP/ECP, then SSO/SLO/etc.
...
- Identity Selector: User terminal/in the cloud
* 3. Study open source software : and complete an objective review
* Any software is introduced :
- Introduced and discussed software on the mailing list
...
...
- Interested partie are invited to register and take part to the discussion
...
- We will limit the studies to one week in duration
- We will attempt to categorize the softward
- Check functionalities
- Check open specifications implementation
- Check for certification
- Approval by vote of the group members
...
...
- Publish a note for each software in the public directory
...
...
- Announce the publication on the maling list
...
- Online comments and ratings
...
- Allow WG members to add comments and ratings
...
- to each software note
4. OSSIWG
...
* Milestones & immediate Deliverables :
- Vote to accept this work
...
- Setup a wiki space for this task
...
- Define the categories and existing open specifications and certifications
...
- Make a non-exhaustive list candidate
...
- software
...
- Setup the directory on the wiki
...
- (template for notes, functions to add comments and ratings...)
...
- Advertise the beginning of the
...
- effort; recruit participants
- Begin the survey: Objective 2 products per month
...
Open source general knowledge survey
Goal
Make Conduct an annual survey to know the people state of mind within the community as to their feelings about open source, free software , and OSSIWG works.
...
initiatives
1. Sample questionnaire
General
...
FAQs : *
- Do you think that there is a difference between open source and free software?
...
- Have you ever heard about copyleft?
...
- Have you already heard about software license that provide "contamination"?
...
- Have you already heard about "prophylaxis" concerning a software?
...
- Do you know the name Apache License?
...
- Do you know the Apache license in the sense that you know how you can develop with an existing software with that license?
...
- Do you know the name MIT License?
...
- Do you know the MIT license in the sense that you know how you can develop with an existing software with that license?
...
- Do you know the name BSD License?
...
- Do you know the BSD license in the sense that you know how you can develop with an existing software with that license?
...
- Do you know the name GNU GPL License?
...
- Do you know the GNU GPL license in the sense that you know how you can develop with an existing software with that license?
...
- Do you know the difference between GPL and AGPL license?
...
Questions to businesses with open source and free software : *
- Do you work for a company that edit softwares?
...
- Does you company practice paying license software?
...
- Does you company has open source software?
...
- If yes, which license?
...
- According to you, why could be the main reason for a company to do open source?
...
- Promote a technology and its adoption
...
- Transparency/benefit on user trustworthiness
...
- Prove the quality of the code
...
- Improve the company ecosystem
...
- Contributing to common wealth
...
- Other reasons
...
- Do you think that exists a business model for companies doing only open source software?
...
- Have you ever bought a software license?
...
- Did you pay for its use only in mind?
...
- Or, did you pay for the bug corrections/updates?
...
- Did you pay thinking that you had no other choice?
...
...
- Do you think that, for the same functionalities, a paying license software is more secure that an open source software ?
...
- Do you think that main free software are as well maintained as software with paying license (bugs are regularly corrected, functionalities are added, etc.)?
...
- Do you think that, to maintain a software, it is more interesting to contract directly with a free software maintainer than to pay a license software?
Identity products : *
- Have you ever used an open source product for identity management?
...
- Would you go in production with an open source product for identity management?
...
- Among these technologies, which, according to you, are missing open sources implementations?
...
- Cryptography
- HTTP server/Client
...
- XML, DTD, namespaces
...
- XML signature or encryption
...
- WS-Security
...
- SAML
- OpenID
- OAuth
- UMA
- WS-Trust
- ID-WSF
- X509
- Identity selectors, claims-agent, Identity-in the-cloud agent, etc.
...
- XACML PDP
...
- XACML PEP
...
- Access control policy definition (allowing definition of WS-policy or XACML documents)
...
- Privacy policy definition (allowing definition of P3P documents)
...
- LDAP directories
...
- LDAP meta-directoty/synchronization
...
- Identity backends (LDAP, DB, text files) synchronization
...
- SPML
- For each categories, ask if the products in the directory are known.
2. OSSIWG : *
- Did you know this WG before you were asked to answer this survey?
...
- If yes, are you a WG member?
...
- If not, do you plan to register?
...
- If not, do you plan to register?
...
- If yes, have you read public production of the OSSIWG?
...
- Do you think that Kantara Initiative is a relevant actor to publish some works about open source?
OSSIWG Tasks
* 2. OSSIWG Milestones & immediate Deliverables :
- Vote to accept this work
...
- Setup a wiki space for this task
...
- Define a generic questionnaire
...
- Define the targets: KI members only, more.
...
- Adapt the questionnaire if necessary
...
- Define if it is an open questionnaire or if we should distribute tickets
...
- Define the vote duration (2 or 3 weeks)
...
- Accept the questionnaire by vote
...
- Publish the questionnaire and
...
- set up the vote
...
- Advertise the vote
...
- Analyze results
...
A quick guide on open source and free software
...
Goal
...
- Provide general explanations and pointers on the main references
...
- Periodic highlights from articles about open source (Blog?)
...
- Move
...
- toward a free online magazine, with a reviewing committee
...
- that publishes works related to open source software
...
- ---emphasizing technology, green IT, etc.
OSSIWG Tasks
* 1. OSSIWG Milestones & immediate Deliverables :
- Vote to accept this task
...
- Setup a wiki space for this task
...
- Define the objectives
...
- Define the content and
...
- structure
...
- Define the web page navigation (plan how the articles will be highlighted)
...
- Create the guide: redaction/review 3/4 iterations
...
- WG approval of the guide
...
- Publish online
...
- Form a reviewing committee
...
- Call for papers
...
...
- Publish papers
...
- ad hoc
- Make special issues
...
...
Advertise standards/specs in the scope of
...
Kantara to
...