Date
2018-0102-1721
Representation
NOTE: As of April 19, 2017, February 2018 for calculation of quorum there are 7 WGs8 Work Groups.
Agenda and Meeting Notes
Topic | Desired Outcome |
---|
Meeting Administration |
Roll Call | Quorum was achievednot reached |
Agenda Confirmation | New items: - IAWG request to certify SAC updated publications to go to All Member Ballot - eBallot coming
- Upcoming conferences and speaking proposals
- Kantara Plenaries 2018
- Group Plans for 2018
- LC Elections
- Andrew, Mark and Sal are willing to continue as Chair, Vice, Secretary
- No other nominations were received
- Discussion about Kantara voting procedures for publications
- Brief discussion about publication repositories (a.k.a. 'Why does Kantara insist that we generate a PDF version of our specs?')
- Discussion about Leadership Council Objectives for 2018 & how it relates to the overall Kantara mission
|
Minutes confirmation |
Draft minutes for approval: 2018-01-17 Meeting notes DRAFT 2017-12-20 Meeting notes DRAFT 2017-11-15 Meeting notes DRAFT 2017-10-18 Meeting notes DRAFT 2017-08-16 Meeting Notes DRAFT 2017-05-17 Meeting Notes DRAFT 2017-03-15 Meeting Notes DRAFT 2017-01-18 Meeting Notes DRAFT "To approve listed meeting minutes" Motion by: Second: Discussion: Result:
|
Organizational Updates |
Executive Director and Staff Report | Director's Corner: 2017: December & the year in review Membership Restructure changes to take effect January 4, 2018 Publications: The following 7 and earlier publications were downloaded over 700 times - demonstrably proving Kantara's contribution to the global identity and personal data communities - members and non members. UMA 2.0 finished development and just completed its 2nd 45-day IPR & public review before minor edits and official publication.Consent Receipt v1.0 was published, v1.1 developed completed and is nearing the end of its 45-day IPR & public review period, with official publication in March.SAML V2.0 Implementation Profile for Federation Interoperability finished and completes its 2nd 45-day IPR & public review on January 1st, superseding the eGovernment Implementation Profile V2.0 of 2011. |
Report completed by the eGov Working Group on the 'Code of Conduct for Relying Parties for services to Government' is being prepared for official publication. Report completed and published by the IRM Working Group on 'Refining the Design Principles of Identity Relationship Management', building on implementation experience from the original report a year or so earlier with a similar name. Report completed and published from the Blockchain and Smart Contracts Discussion Group. Here is a quote from a large US federal agency employee. "It was a pleasure to read, both well written and informative. (I’ve been reading a lot of BAD blockchain papers and articles lately;-)). The discussion of Smart Contracts is the best I’ve read. I’m going to pass it around to try to counter all the crazy Smart Contracts will solve all our problems talk going around the [entity redacted ] right now".Kantara's Service Assessment Criteria for 800-63-3 at IAL2 & AAL2 for future conformity assessment developed and currently out for 45-day IPR & public review.LC Chair Report | The Kantara Initiative is the global consortium improving trustworthy use of identity and personal data through innovation, standardization and good practice. Corporate members needed - membership dues offset operational costs and allow the Groups to operate with a 'No-Fee' participation structure. Continues to be very strong interest in Consent management and Consent receipt |
New | Consent Management Solutions WG has been launched. Collecting Participants now - first meeting mid-January.New Business |
WG/DG Updates | Administrative Reminders/Requests: Please ensure your WG and DG charters are reasonably current. These are supposed to be reviewed annually. IRM WG - WG discussing what the next Publication topic will be OTTO WG - OTTO v1 spec under development. Adding budget for developer in 2018 UMA WG - UMA v2 is now available for download BSC DG - Report is now available for download IA WG - Service Assessment Criteria to match NIST SP 800 - 63-3 are in Public Review until January 29 2018
CIS WG - Consent Receipt Specification v1.1 in Public Review until January 20 2018
eGov WG - LC Ballot closed - approval for publication of the report FI WG - Has a disposition of comments been completed? next step is All member ballot IDoT DG- ?What Report is being developed for publication? |
Launching New WG/DG's |
|
New publication type | - Andrew proposes to define a new type of Kantara publication: the 'Best Current Practice' Recommendation. This would follow the same intent as with IETF BCP documents.
- Currently the publication type: 'Recommendation' has sub-types of 'Recommendation' and 'Technical Specification'. The 'Best Current Practice' would become a third sub-type.
"The BCP subseries of the RFC series is designed to be a way to standardize practices and the results of community deliberations. A BCP document is subject to the same basic set of procedures as standards track documents and thus is a vehicle by which the IETF community can define and ratify the community's best current thinking on a statement of principle or on what is believed to be the best way to perform some operations or IETF process function." Ref: IETF BCP 9
|
Long-running Topics |
Action Items Review | Please take a moment to review the list of action items and do your best to take action. |
GDPR-Related Activities | Colin has started a GDPR readiness project for Kantara operations |
Policies & Procedures update | Operating Procedures are being updated to match the current version of Bylaws. Some streamlining and addition of document publication procedures is being done as well. New boilerplate templates for email ballots are being created. |
Tips and Tricks |
|
2018 Project Funding |
|
Document repo/Publications Library | Good downloads activity in January to start the year User-Managed Access (UMA) 2.0 Grant for OAuth 2.0 Authorization | 30 | Consent Receipt Recommendation V1.0 Report | 24 | Federated Authorization for User-Managed Access (UMA) 2.0 | 22 | Report from the Blockchain and Smart Contracts Discussion Group to the Kantara Initiative | 12 | Identity Assurance Framework: Service Assessment Criteria | 8 | |
Kantara-presence Events | List of future events on KantaraInitiative.org - TIIME, Vienna Feb 5-8: A few of us going, no current plans to workshop (but we could), getting tight timewise to announce an EU Plenary there.
- OWI, DC March 26-28. A few of us going, Kantara panel with AndrewColin, Scott Shorter (Kuma), Id.me (Tracy Hulver), me, possibly Mary Hodder and/or Kaliya. If enough LC there could consider a plenary if enough interest, Andrew.
- IIW, MV, Tues April 3-5, No plans to sponsor, but ForgeRock has offered its offices on Friday 6th for F2F Board/LC and or Plenary if you want it.
- RSA April
- EIC, Munich May Tues 15-18, Pre-conf workshop confirmed for the morning of the 15th. Who will speak at it? I need to know today. Lots of us going and speaking at the main event.. Can do EU plenary on Monday 14th if you enough interest.IPS
- International Privacy Summit (Kantara's first ever branded conference), London Tues May 22nd. Who can speak at it? (currently is Mark/Sal, Mike, Colin, Robin W, Allan F (Eve?). We can hold a UK Plenary on Monday or Wednesday if there is enough interest.. and I think there is already.
- Identiverse, Sun June 24th - 27th, Boston. Community expo space secured for us @same deal as last year. Gluu has already taken 1 of the 4 spots available. Was Cirrus, Gluu and ID.me last year. Could hold a plenary Sunday morning through mid-afternoon if enough interest. Who has submitted speaking proposals?.. Eve, Andrew and I have
|
Plenary planning | NEW Topic as of February 2018 - status update on planning for plenaries in the next 12 months Munich, May 14 2018 - Intent to have a Kantara Annual General Meeting
- Intent to have a Member Plenary
- Both to happen the day prior to EIC conference somewhere in Munich - Colin is seeking meeting space at a Member location
- Financial sponsors for the event would be appreciated (3 x $1000) - modest cost anticipated (but if they want to go big we won't say no!)
No decision yet on where/when to hold a North America or APAC plenary.
|
Discussion
CIS 2018Possibilities: 'proof' of implementations via case study; interop testing/approaches; formalization of extensions to meet different regulatory requirements; formalization of profiling to constrain for 'community' implementation; more example for things like Purpose/Purpose categories; contribution to ISOIRM 2018"Relationships as a technique to look at ID Governance"; directory relationships; graph applications; 2018 Plenaries | - Kantara must start having regular in-person Plenaries
- Probably Europe and North America
- Spaced 4 months apart? 6 months apart?
- Options?
- Tack onto existing conferences?
- Standalone event with sponsors?
- Agenda
- in-person WG meetings?
- joint WG meetings?
- "something to hack on" to draw people
- opportunity for active participants to bring others from their company to see what is coming & value from Kantara
- Possible dates
- EIC Munich May 15
- Pencil in for May 14 / Monday afternoon
No volunteers to lead the organizing of the event |
2018 Group Plans | UMA 2018- 2016 plans are now executed - longer than expected
- Charter and roadmap discussion January 18
- Joint Consent Receipt / UMA; Legal framework & business model; github issue around extensions
IAWG 2018- Discussion/Decision needed on which part of IAF/SAC update to do next
- to happen after the 63-3 based updates are completed
- Looking at other trust frameworks / new trust marks for new SACs
- How to assist CSPs to transition from 63-2 to 63-3
OTTO 2018- More work to do for schema/vocabulary in JSON-LD; finishing up SAML/OIDC; re-edits needed for finalization
- OTTO v1.0 is possible in 2018
- Need strategies on adoption - work with a federation to use OTTO
Discussion about Kantara voting procedures for publications
| - There are several issues related to publication of Kantara documents
- Quality control issues with some of the documents being approved from DG/WG - some are simply not ready for publication
- LC Certification votes - need to clarify what actually needs the LC to vote versus what just needs quality control
- Suggest to create a Publications sub-committee of the LC with authority to certify publications - must have an LC officer on the sub-committee
- Need to increase automation of approval steps (e.g. ballots)
- Need to improve hand-off times between steps
|
Brief discussion about publication repositories (a.k.a. 'Why does Kantara insist that we generate a PDF version of our specs?') |
|
Discussion about Leadership Council Objectives for 2018 & how it relates to the overall Kantara mission: Kantara Initiative Leadership Council Balanced Scorecard 2018As Kantara Initiative Leadership Council Chair, one of my responsibilities is to ensure that Kantara Groups are functioning and aligned with Kantara’s organizational objectives. To this end, in Summer 2017, I created an initial set of strategic objectives for the Kantara LC using the Balanced Scorecard methodology. This note describes an initial set of strategic objectives for 2018. From balancedscorecards.com: The Balanced Scorecard is a management system. It’s a way of looking at your organization that focuses on your big-picture strategic goals. It also helps you choose the right things to measure so that you can reach those goals. A normal Balanced Scorecard uses four perspectives to measure organization health and progress: Learning & Growth; Internal Business Processes; Customer; Financial. Each perspective has a few strategic objectives for the organization, each objective has a few measurable metrics to track progress. The Kantara MissionThe Kantara Initiative is the global consortium improving trustworthy use of identity and personal data through innovation, standardization and good practice. Kantara Leadership Council PerspectivesScope definition is critical for developing effective balanced scorecards. For Kantara, the balanced scorecard is written with the perspective that the groups, collectively, are the organization whose objectives are being measured. I have interpreted the four perspectives as: - Consumers of group outputs (Customer)
- Kantara Member value for money (Financial)
- Administrative/Internal processes (Internal business processes)
- Aggregate participant capabilities &Knowledge base(Learning & Growth)
Kantara Leadership Council ObjectivesTo start the discussion, I have developed 3 objectives per perspective. Once the LC has discussed and refined these objectives, we can move to define Measures and start regular reporting. The Perspectives and their Objectives are: - Consumers of group outputs
- Increase Kantara Member and non-Member awareness of Kantara Publications and Programs
- Increase non-Kantara usage and citation of Kantara publications
- Increase breadth of participation in publication creation
- Kantara Member value for money
- Increase the value that Kantara Members perceive of the network effect of being a Kantara member
- Increase the number of Member products and services that are directly supported by Kantara publications and programs
- Increase Member’s desire to associate with the Kantara brand
- Administrative/Internal processes
- Decrease the level of Group leadership effort required for Group operations and Publication process
- Decrease elapsed time to execute regular processes
- Increase engagement between Group leadership and the Kantara Board & Organization
- Aggregate participant capabilities &Knowledge base
- Increase completeness of publication suite for high-visibility knowledge domains
- Increase relevance of new and existing projects and publications
- Increase focus on interoperability as a primary driver for specifications
| - Andrew briefly introduced the material
- Intent is to clarify what the "Groups Side" of the Kantara house is working to achieve
- Intent is to use system-based measures that support the objectives (passive measures) to avoid loading work onto volunteers for reporting and other non-productive work
- Intent is to use the balanced scorecard to report to Board, Members and Participants to demonstrate how their effort is making progress
- Andrew's goal is to have a reasonable discussion with LC in order to firm up the Objectives in time for the Kantara AGM and Member Plenary in Munich May 14 2018
|
2018 Group Plans |
|
Events with Kantara presencehttps://kantarainitiative.org/events/ Conference | Location | Dates | Call for Speakers |
---|
IAPP PSR 2017 | San Diego | October 15-16; 16-18 2017 | closed | IIW XXV | Mountain View | October 17-19, 2017 | n/a | Identity North West | Vancouver | November 7, 8, 2017 | Closed | Comments |
---|
TIIME 2018 | Vienna | February 7-8, 2018 | n/a |
|
| Privacy and security Conference 19th: Security & Privacy: A Global Evolution | Victoria | February 7-9, 2018 | Closed |
| KnowIdentity 2018 | Washington | March 26-28, 2018 | Closed | Kantara panel with Colin, Scott Shorter (Kuma), Id.me (Tracy Hulver), Mary Hodder, Andrew. Any members speaking? | IAPP Global Privacy Summit 2018 | Washington | March 25-26; March 27-28, 2018 | Closed |
| IIW #XXVI | Mountain View | April 3-5, 2017 | n/a |
| RSA 2018 | San Francisco | April 16-20, 2018 | Closed |
| Internet2 Global Summit 2018 | San Diego | May 6-9, 2018 | October 30, 2017Closed |
| EIC 2018 | Munich | May 15-18, 2018January 15 | Closed | Who is speaking?
| Kantara International Privacy Summit | London | May 22, 2018 | n/a | Kantara's first ever branded conference | IAPP Canada Privacy Symposium 2018 | Toronto | May 22-23; May 24-25, 2018 | November 12, 2017Closed |
| Identiverse 2018 | Boston | June 24-27, 2018 | Closed | Who is speaking? Eve, Sal, Mark, | 2018TBDMike have been accepted so far | myData 2018 | Helsinki | August 29-31, 2018 | April 5, 2018 |
|
** Not listed on Kantara site yet AOB |
Action Items