UMA telecon 2022-04-14

 UMA telecon 2022-04-14

Date and Time

Agenda

  • Approve minutes since UMA telecon 2022-03-31
  • Julie Use-case Report - review feedback
  • Content for Kantara Workshop at European Identity Conference  
  • AOB

Minutes

Roll call

  • Quorum: No

Approve minutes

Deferred

Julie Use-case Report - review feedback

Link to V0.3 Working Group Draft: Notes, drafts, and WIP

Link to diagram source


  1. Should we refer to UMA as a 'standard'?
    1. HEART are profiles on-top on standards
    2. It’s called a ‘specification’ in the body of the document
    3. It’s a Kantara Recommendation
    4. Need a plan to address properly in the document
  2. How can we improve the diagrams?
    1. Maybe can add some numbers to the OAuth relationship ones, or reference the authoritative flows. The flows are in the actual standard docs. 
    2. In general, should we label figures w/ a description. Or cross reference the text to the figure
  3. Need to directly address Identity in the intro or early in the doc. We presume it’s in place. UMA is NOT about authentication, it depends on authentication & identity to be in place, and trust relationships/framework


Content for Kantara Workshop at European Identity Conference   

European Identity Conference  May 10-13, 2022 | Berlin

Content from last Sept:  

Working version for this May:


Deadline to provide content is May 2. Ask is 5-10mins 


Keep in mind:

  • EIC is less technical, more business/product/governance/legal 
  • people looking for the 'next step' of their identity system
  • this session will be a 'pre-workshop' conference


UMA Update

  1. background on uma
  2. oauth and uma
  3. julie use-case
  4. relation to eic
  5. pensions dashboard, public announcements


AOB





Potential Future Work Items / Meeting Topics

  • UMA vs (OAuth, OIDC, GNAP, UDAP, ....) 
    • compare protocols & features (eg a product comparison type matrix with (tick) and (error) 's)
  • Confluence clean up, archive old items and promote the latest & greatest
  • Review of the email-poc correlated authorization specification
  • A financial use-case report (following the Julie healthcare template)
    • either open banking or pensions dashboard
    • openbanking is to FHIR(data model) as FAPI is to SMARTonFHIR(authZ protocol profile)


Upcoming Conferences



Attendees

As of October 26, 2020, quorum is 5 of 9. (Michael, Domenico, Peter, Sal, Thomas, Andi, Alec, Eve, Steve)

Voting:

  • Steve
  • Alec
  • Sal

Non-voting participants:

  • Chris
  • Nancy
  • Scott
  • George

Regrets: