Re: [security-services] Minutes for your review.

Title: Re: [security-services] Minutes for your review.

Okay, comments were internal, not public.  I’ve amended the minutes... last attachment?

Thanks Tom.

--Kent

On 3/10/09 12:12 PM, "Tom Scavo" <> wrote:

A few clarifying remarks inline...

On Tue, Mar 10, 2009 at 1:59 PM, Kent Spaulding

<> wrote:

> * Minutes for SSTC Conference Call

> * March 10, 2009, 12:00pm ET

> * Scribe: Kent Spaulding

> *

> * Summary:

> *

> *  Two documents moving to Committee Draft.

> *     SAML V2.0 Attribute Extensions

> *     SAML V2.0 Metadata Extension for Entity Attributes

> *

> *  Six documents approved for Public Review period.

> *

> *  Work progressing on new Errata document.

>

> Proposed Agenda SSTC Conference Call

> March 10, 2009, 12:00pm ET

>

> Dial in info: +1 215 446 3648

> Access code 270-9441#

>

> Roll Call & Agenda Review

>

>

> ** Quorum was achieved.

>

> Need a volunteer to take minutes

>

>

> ** Kent Spaulding volunteered.

>

>

> 1. Minutes

>

> 1.1 Minutes from SSTC/SAML conference call February 24, 2009

> http://lists.oasis-open.org/archives/security-services/200903/msg00006.html

>

>

>

> ** Accepted without comment.

>

> 2. Announcements

>

> 2.1 fyi: W3C XML Security Specifications announcement

> http://lists.oasis-open.org/archives/security-services/200902/msg00040.html

>

>

> * Frederick Hirsch explained the specifications.  Asked for feedback.

> *   Helpful resource for URIs.

> *   Work happening of potential interest to SSTC members.

> *

> * HalL asked for SSTC Members to give this a good look.

>

> 2.2 Call for Disclosure - XSPA Profile of SAML for Healthcare v1.0

> http://lists.oasis-open.org/archives/security-services/200903/msg00000.html

>

> * HalL If you have relevant IPR, speak now, or soon.

> *   No comments during the call.

>

> 3. Document Status

>

> 3.1 SAML V2.0 Metadata Interoperability Profile - Draft 4

> http://lists.oasis-open.org/archives/security-services/200903/msg00002.html

>

>

> * Scott Cantor: New text is complete.  Public commenter is satisfied.

The original comments came from Tom Scavo.  As far as I know, we have

received no public comments regarding this profile (which has been a

working draft until now).

> Tom Scavo agrees to keep it general.

> *   Will re-read, should be non-normative changes, if any.

> * Tom recommends moving forward.

> *

> ** Scott Cantor motions to move to CD.

> **   Seconded by: Bob Morgan.

> ** No objections to unanimous consent.

> * Hal - will move to CD.

>

>

> 3.2 Errata Working Document for SAML V2.0 - Draft 48

> http://lists.oasis-open.org/archives/security-services/200903/msg00005.html

>

>

> * SAML V2.0 Condition for Delegation Restriction

> **   Scott Cantor, motion to move to CD.

> **     Paul Madsen seconded.

> **     No objections.

>

>

> * other docs

> * Paul Madsen: updates to Holder of Key Assertion and Holder of Key Value

> Profile updates...

> *  TC members to look at these.

Tom Scavo uploaded CD versions of the Holder-of-Key Web Browser SSO

Profile and the Holder-of-Key Assertion Profile (resp.):

http://lists.oasis-open.org/archives/security-services/200903/msg00016.html

http://lists.oasis-open.org/archives/security-services/200903/msg00015.html

These documents are ready for Public Review.

> 4. Discussion

>

> 4.1 Status of Metadata specs for Public Review

>

>

> * Six Candidates for PR:

> * 1. SAML V2.0 Attribute Extensions

> * 2. SAML V2.0 Metadata Extension for Entity Attributes

> * 3. SAML V2.0 Holder-of-Key Web Browser SSO Profile

> * 4. SAML V2.0 Holder-of-Key Assertion Profile

> * 5. SAML V2.0 Metadata Interoperability Profile

> * 6. SAML V2.0 Condition for Delegation Restriction

>

> ** Scott: Motioned to Public Review

> **   Paul seconded.

> ** This set to be moved to PR.

>

> * Actions:

> * XHTML needed for documents for PR.

> *  Wiki to be updated.  Hal to be notified.

>

> ** Review will likely be 60 days.

>

> 4.2 Further action on Errata?

>

>

> * ScottC: Time to publish new draft?

> * EveM advised on updated errata document.

> *   Working doc.

> *   Official doc was extracted.

> *   final package had official doc, working doc, and red-lined markup.

> *   SSTC SAML Approved Errata 2.0...

>

> * New version of document name?

> * EveM: treat as separate document...

> *   HalL: should be cumulative.

>

> * HalL: Process -> adopt subset, non-substantive, 15 day review.  Make it

> into approved errata.

>

> * HalL: Discuss: Prepare actual doc, or use existing docs?

> *  EveM: latter. Already individually approved.

> *  ScottC: will extract.  EveM will help cleanup.

> *  HalL:  Next call to have new Errata document, as draft.

> *         3 votes on the doc next call.

> *         "2009 Errata" for versioning document name.

>

> 5. Other business

>

>

> ** None.

>

> 6. Action Items (Report created 09 March 2009 09:32pm EDT)

>

> #0345: Propose wording for SessionNotOnOrAfter attribute errata for core

> Owner: Scott Cantor

> Status: Open

> Assigned: 2009-02-09

> Due: ---

>

>

> * "removed MUST" that was extraneous. Added sentence to defer to profiles.

> * 1722-1726 is new lines.

>

> * RobP: comment: will check the draft.

> * HalL asks, comfortable or more time required?

> * ScottC:

> *   Reviewed changes.

> *    Discussion about RP and sessions... but can't assume sessions in all

> profiles.

> *    Deferred looking at the attribute to the profile.

> *

> ** Motioned to accept, by Scott Cantor.

> **  Seconded: <?Bob Morgan?>

> *      No change in meaning - meaning is profile-specific.

> ** No objections to unanimous consent.

> *

> ** Action to be closed.

>

> Wrap-up:

>

> ** Move to close.

> * Next call on 3/24.

>

>

>

> Attendance:

>

> Voting Members

> ----------------------

> Rob Philpott  EMC Corporation

> John Bradley  Individual

> Jeff Hodges Individual

> Scott Cantor  Internet2

> Nathan Klingenstein Internet2

> Bob Morgan  Internet2

> Joni Brennan  Liberty Alliance Project

> Tom Scavo  National Center for Supercomputing Applica...

> Frederick Hirsch  Nokia Corporation

> Ari Kermaier Oracle Corporation

> Hal Lockhart  Oracle Corporation

> Anil Saldhana  Red Hat

> Kent Spaulding Skyworth TTG Holdings Limited

> Emily Xu Sun Microsystems

> David Staggs Veterans Health Administration

>

> Members:

> -------------

> Eve Maler  Sun Microsystems

> Paul Madsen NTT Corporation

> Srinath Godavarthi Nortel

>

> Quorum Achieved: 15 out of 18 Voting Members (83%)

> Membership Status Changes: None

>

>

>

> ---------------------------------------------------------------------

> To unsubscribe from this mail list, you must leave the OASIS TC that

> generates this mail.  Follow this link to all your TCs in OASIS at:

> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php

>

>

20090310-SSTCMinutes.txt