ULX Telecon 2009-12-09

Quorate Meeting

There was a Liberty IDPS WG. Paul forwarded to the entire list a PPT that Philippe Clement had sent to him. We will discuss this on next week’s call.

We cataloged the benefits of some kind of embedded object or markup:

We created a (non-exhaustive) list of design goals for RP metadata:

Supports either login triggered by embedded object/markup or login triggered by the user clicking a button
Has common semantics irrespective of the option used in #1 above
Supports identity-enabled as well as unmodified browsers
If it is absolutely critical to embed the RP metadata itself (beyond the trigger), then the RP metadata (XML) should be base64 encoded
Paul: It should support attribute aggregation (see Attributes First)
Paul: It should support attribute (e.g. URI) mapping
Scott/all: It should support value-based filtering (e.g. asking for a claim for a particular monetary amount)
We agreed that we’d create a wiki page for working on this on the wiki

There was general consensus that we should proceed to create a prototype of a non-chrome login button that visually links to a chrome login button.
We should focus on trying to demonstrate a good UX and not worry about RP adoption
Bob: a cool login button coming out of this group would be quite complementary to what some specific higher ed federations are doing

Bob: will contribute a second use case based on the experiences with the European Higher Ed. Federations
There was consensus that we should proceed with creating dynamic HTML prototypes of our use cases

Resolution: It was agreed that we should add OASIS as a second alternative “target” SSO for the output of this group (in addition to the W3C).

Resolution: We approved all past minutes of this group except those of November 18th

Bob mentioned the upcoming Kantara F2F in Portland Oregon March 9-11 and proposed that this ULX group will hold a meeting there.

Browser not supported