Meeting Minutes 21 August 2019
Kantara FI-WG Teleconference
Minutes approved on 04 September 2019 call
Date and Time
Date: Wednesday, August 21, 2019
Time: 16:30 EDT
Attendees
Wessel, Keith (v)
Bush, Judith (v)
Cantor, Scott (v)
Morgan, Andrew (v)
Goodman, Eric
Hoehn, Walter (v)
Buxey, Alan (v)
Wallis, Colin
Agenda
Roll call (QV group participation agreement)
Agenda bash
Approval of 8/7 meeting minutes
Walter: formatting revisions: completed and summarized in an 8/15 note to the mailing list. Outstanding questions/issues were:
Nick’s AI to update the disposition column on the feedback page: https://kantarainitiative.org/confluence/x/6IDJBg
Rainer provided clarification on his feedback on SDP-SP23 in an email to the list dated 27 July. Any action to be taken?
Review of outstanding issues in Github
Any further work needed on feedback received so far
Minutes
Roll call (QV group participation agreement)
Quorum achieved
We will remove John Bradley from the list
Agenda bash
Should "SAML Browser SSO Profile" and "Single Logout profiles" in the "Notations and Terminology" section have references?
In section 1, there is a reference, but in section 1.1, there is not a reference.
Should it say “Web Browser SSO Profile” everywhere? There is inconsistency in the naming and capitalization
Capitalize “Profile”
Web Browser SSO Profile/Single Logout Profile
SAML Browser or Browser => Web Browser
Minutes approved
Approval of 8/7 meeting minutes
Walter: formatting revisions: completed and summarized in an 8/15 note to the mailing list. Outstanding questions/issues were:
AI: Eric will review for consistency
Should the abstract or introduction mention that this document supersedes saml2int, since the title has changed with this version?
Proposed that we remove the subsection numbers, but otherwise keep the content unchanged.
Alan suggests making them section headings instead of numbers
Just remove subheadings from 2.1. AI Alan wrote PR.
This working group could say that this supersedes the prior version, provided the Kantara leadership doesn’t disagree.
REFEDS uses the original document and probably can’t use the new version
Path of least resistance is to leave as-is rather than try to explain why
Decision: leave this as-is
What about saml2int.org? Do nothing now
In section 2.1 all four requirements have their own subsections. This seems a bit inconsistent with later sections.
AI: Walter merge(d) the existing pull request (DONE)
There is still an asciidoctor artifact that is causing the "Contributors" headings to be red. I/we should probably figure that out, although I guess it looks fine as is.
AI: Alan wants to beat on this for a while to try to make it match the implementation profile (DONE)
Walter - reading through the whole document - the requirements seem like they have received considerable word-smithing, but the introduction and another section could use some touch-up. AI: Walter will send improved wording to the list for review
Nick’s AI to update the disposition column on the feedback page: https://kantarainitiative.org/confluence/x/6IDJBg
Scott completed revisions to items 5 and 6. Any further work needed on this page?
Homework assignment for everyone - review the disposition column. Is there anything else to be done for these items? Issue 6 may need improvement.
Rainer provided clarification on his feedback on SDP-SP23 in an email to the list dated 27 July. Any action to be taken?
“Responding to item 4 (SDP-SP23/IDP-disco): I agree that [IdPDisco] does not prescribe the caching solution. However, it fails to point out that best practice is to have a centralized caching solution but decentralized UI. At least I think that this is best practice, because it reduces the IDP-disco process, and in certain use cases (users always starting with an intranet portal that will provision IDP-disco cookies upfront) it can almost eliminate it. The RA21-document that I mentioned describes this approach.”
Related to homework item above.
Here is Rainer’s clarification:
Scott disagrees that centralized discovery is a best practice
Scott - our document should be silent about this. Eric agrees.
We (Shib project?) tried to separate the discovery from the SP so that changes to discovery don’t require changes to the SP software.
Deep linking matters
Review of outstanding issues in Github
Any further work needed on feedback received so far
Next Meeting
Date: Weds, Sep 4, 2019
Time: 16:30 EDT
You can also dial in using your phone.
United States: +1 (669) 224-3318
Access Code: 110-596-309
More phone numbers
Australia: +61 2 8355 1038
Austria: +43 1 2530 22500
Belgium: +32 28 93 7002
Canada: +1 (647) 497-9380
Denmark: +45 32 72 03 69
Finland: +358 923 17 0556
France: +33 170 950 590
Germany: +49 692 5736 7300
Ireland: +353 15 360 756
Italy: +39 0 230 57 81 80
Netherlands: +31 207 941 375
New Zealand: +64 9 282 9510
Norway: +47 21 93 37 37
Spain: +34 932 75 1230
Sweden: +46 853 527 818
Switzerland: +41 225 4599 60
United Kingdom: +44 330 221 0097
NOTE: Do not follow the code with a "#" symbol as it may cause the code not to be recognized.