UMA telecon 2022-06-16

Owned by Alec Laws
Jun 28, 2022

UMA telecon 2022-06-16

Date and Time

Agenda

  • Approve minutes since UMA telecon 2022-03-31
  • Charter Refresh
  • Home Page Refresh
  • UMA/UDAP/etc comparison - Let's add a row for GNAP/mDL
  • AOB

Attendees

  • NOTE: As of October 26, 2020, quorum is 5 of 9. (Michael, Domenico, Peter, Sal, Thomas, Andi, Alec, Eve, Steve)
  • Voting:
    • Peter
    • Alec
  • Non-voting participants:
    • Scott
  • Regrets:

Quorum: No

Meeting Minutes

Approve previous meeting minutes

  • Deferred–no quorum

Topics


Home Page Refresh

Draft New Home Page


Charter Refresh

Draft Charter 2022

UMA 1 (2012?) now at UMA 2 (2018), what's the roadmap from today?

  • biggest 1→2 change was to be more 'oauth-y' and to remove confusing concepts
  • does anyone use the PCT... or make can we make options more explicitly optional?
  • can UMA be even more OAuth compatible? one UMA challenge is that clients can't just take existing libraries
    • OIDC writes profiles of OAuth, we're not fully bw-compatible
  • do we have some bets as to when GNAP will start to supercede OAuth, should we create the UMAonGNAP version?
  • clarify who hosts the AS, and why? with OAuth it's clear that an RS needs an Oauth AS associated/co-located with it
  • how can we make the UMA value more clear (earlier in someones understanding), the RO is in control
    • it takes a long time to get people to understand or have their 'a-ha' moment as to why UMA is the right solution
    • how can we enable UMA implementors to more easily get here with customers?
    • the marketing part of why it exists, why you need it
  • Need to move away from technical and into a more 'marketing' or evangelism mode
    • control of access to user, lots of industry shift here (patient-centric, open banking, verifiable creds
  • Could we have an open survey
    • Do you know what UMA is?
    • Why don't you use UMA?


Marketing & non-technical explanation of value, OAuth backwards compatibility, Survey 


We're AT the UMA 'early adopters' point, how can we transition to wide usage?




Potential Future Work Items / Meeting Topics

  • Confluence clean up, archive old items and promote the latest & greatest
  • Review of the email-poc correlated authorization specification
  • A financial use-case report (following the Julie healthcare template)
    • either open banking or pensions dashboard
    • openbanking is to FHIR(data model) as FAPI is to SMARTonFHIR(authZ protocol profile)
  • mDL + UMA
  • UMA + GNAP https://oauth.xyz/specs/ 
    • would we have an UMA GNAP version (eg extension of GNAP or UMA? UMAonGNAP) 
    • will GNAP meet all the UMA outcomes?

Upcoming Conferences