UMA telecon 2011-09-15

Date and Time

Agenda

Attendees

As of 22 Aug 2011, quorum is 6 of 10.

  1. Catalano, Domenico
  2. D'Agostino, Salvatore
  3. Fletcher, George
  4. Hardjono, Thomas
  5. Maler, Eve
  6. Szpot, Jacek

Non-voting participants:

Regrets:

Minutes

Roll call

Quorum was reached.

Approve minutes of 2011-09-01 and 2011-09-08 meetings

Minutes of 2011-09-01 and 2011-09-08 meetings APPROVED.

Action item review

2012 Kantara budget process: proposals due by Sep 15

Given that our goal/desire is to finish incubating the UMA specs and contribute them to the IETF (if it will have them) by the end of the year, how should we see our role in 2012? Note that OpenID Connect is supposed to have its specs finalized within a couple of weeks. And "going to the IETF" is a crapshoot. (smile) We have a practical dependency on the completion of OAuth 2.0 and the rechartering effort. But in general, it seems we still are interested to have Kantara to be the home of a community that facilitates implementation and interop.

Discussing Kirk's UMA Interoperability Event Support proposal: Kirk suggests two or more events around the world. Jacek is one of the independent implementers. He has trouble with getting his own budget for F2F events, but could easily do virtual interops. What if we were to propose budget to host an interop at an existing external event (such as an OpenID Summit) that would be a good partner for UMA. Kirk notes that Google paid for someone to video-record some of the recent OpenID Summit sessions; we could try to get funding to capture and make more widely available such an event. The overall goal (similar to OpenID Summit itself) would be promoting UMA to potential developers and educating them, which is a little different from a strict interop goal. We could also target various European external events.

Discussing Kirk's UMA Benchmarking proposal: Kirk notes that Rolland Hedberg, who has done SAML interop and performance testing, has offered an OpenID endpoint for same. And Andrew Arnott offered something like this in early days for OpenID (e.g. you could click a link to see all the server activity, and then click to clear the status). Could we ask for support to build something like this, perhaps as a layer on top of an existing implementation like UMA/j or Jacek's Python implementation? A new SMARTAM version will be released soon with basic claims support, and they're doing some work with some external orgs.

Discussing Kirk's UMA 3rd Party Implementation proposal: We like the idea of focusing on OpenID Connect integration and developer-readiness of open source code.

  1. For a revision of the first proposal, what if we request $5000 to fund UMA WG participation in/sponsorship of two external events where we can do interop testing and developer education?
  1. For a revision of the second proposal, what if we propose some specifics around the kind of functionality that the testing software should have? We think $5000 is fair to ask for. This should ideally be built on top of an existing open-source implementation.
  1. For a revision of the third proposal, should we focus on requesting $5000 in matching funds if we can interest another party in contributing $5000, specifically for OpenID Connect/UMA integration?

Thomas moves, and Sal seconds, approval of the above requests for the LC's and board's consideration in 2012 budgeting.

AI: Kirk: Revise budget requests. (DONE; Eve will review and submit.)

Recent and upcoming gatherings

Core protocol issues in GitHub

Thomas is up to date on incorporating closed issues.

Next Meetings