LC eBallot to reduce PRP to IAWG Approved Recommendations - SAC Updates

Justification for classifying these changes as being ‘minor’:

Setting aside any purely editorial changes, revisions proposed to Kantara SACs are of the following form and the IAWG meeting of 2018-09-12 agreed that they are collectively only minor in magnitude, did not identify any IPR conflicts and therefore arguably fit for immediate release.

IAF-1410 has a strengthened requirement for stating and demonstrating availability that is already generally applicable – there is no fundamentally new requirement;

IAF-1430 has a number of valuable amendments to requirements which clarify those elements of NIST SP 800-63 rev.3 which have been found difficult to interpret, or to achieve (to the point of intractability in some cases). These amendments are relatively simple in nature but have the effect of making overall conformity easier to attain. Whilst one could argue their effect will have significant (rather than minor) benefits, the changes themselves are minor and delay caused by potentially 60 days consisting of public review and All Member Ballot are not warranted against the immediate benefit which CSPs are likely to gain from the clarity now provided.

IAF-1440 amendments, whilst fewer, should be subject to the arguments made for ’1430, with the additional comment that three requirements have been expressly defined as no longer applicable to identity-proofing functions where they were proving to be difficult to meet.

The IAWG therefore recommends release of these SAC revisions at the earliest opportunity on the basis that the revisions per se are minor in nature and do not encumber CSPs any more (and probably less) than do the existing criteria.

Document:

Version:

Document Date:

Document URL:

Kantara IAF-1410 Commonly-Applicable Service Assessment Criteria

1.4bis

2018-09-25

Download the document Kantara IAF-1410 Commonly-Applicable Service Assessment Criteria v1.4bis....docx

Document:

Version:

Document Date:

Document URL:

KIAF-1430 SP 800-63A Service Assessment Criteria

v2.5bis

2018-09-25

Download the document KIAF-1430 SP 800-63A Service Assessment Criteria v2.5bis (LC Review).xlsx

Document:

Version:

Document Date:

Document URL:

KIAF-1440 SP 800-63B Service Assessment Criteria

v2.3bis

2018-09-25

Download the document KIAF-1440 SP 800-63B Service Assessment Criteria v2.3bis (LC Review).xlsx

Document wiki page:

WG Charter:

SAC Updates

IAWG Charter

Ballot Opens:

Ballot Closes:

2018-10-03

2018-10-10

SECTION 7.7.1.1 of the Kantara Initiative Operating Procedures v2.2 draft 16.

Approval of a Draft Recommendation as a Kantara Initiative Candidate Recommendation requires a Simple Majority vote of the LC.

NOTE: The LC can, by Super Majority vote of the LC, reduce the duration of the Public Review period for non-material editorial changes to Group-Approved Recommendations or Technical Specifications. The decision must take into consideration the risk of liability being assumed by reduction of the review period. The decision and rationale shall be reported to the Board of Directors at the next Board of Directors meeting. A notice describing the Public Review period reduction shall be included in the notice of Public Review and subsequent ballots.

Eligible voters:

eGov WG
Federation Interoperability WG
Identity Assurance WG
Identity Relationship Management WG
Open Trust Taxonomy for OAuth2 WG
User-Managed Access WG
User-Managed Access Dev WG
Consent & Information Sharing WG

Consent Management Solutions WG