1.   Roll Call

• Present: Nat, Edmund, George, Tom
• Regret: Mike

2.   Creation of the agenda

• As no proposed agenda was previously sent out, it was created on the spot.

3.   AppAuth Process (George)

AppAuth for Android has been hanging out for more than a year iOS version is still maintained by William. Android version was maintained by Ian. Verizon Media is willing to take over but the process is not clear.

• https://openid.net/specs/openid-connect-registration-1_0.html

It is supposed to be wide open.

Issue https://github.com/openid/AppAuth-Android/issues/444 calls for new maintainer of the Android version. George stated that there are Verizon Media developers who would like to be. Nat suggested them to chime into the ticket.

ACTION: Verizon Media Team to volunteer in the issue.

Also, the point that there is no process defined was raised. The closest to that OpenID Foundation has is probably the certification.

ACTION: Nat to contact the certification team to get the document.

Once the document was obtained, the WG should look at it and make necessary changes and convene a call with new and old maintainers. Perhaps we will need a scheduled dev-team call as well, though it may fall out of WG's formal activity.

4.   Healthcare Use Case (Tom)

Tom asked a question around the healthcare device App that he is writing. The initial question was whether the AppAuth supports dynamic client registration. George's answer was "probably does not."

Tom's use case was the EHR/PHR registering to a Self-issued OP where the client (EHR/PHR) has a software statement.

George suggested looking at the software statement in section 2.3 of RFC5791.

• https://tools.ietf.org/html/rfc7591#section-2.3 is the software statement.

Tom replied that he will have a look and also mentioned of Identity statement in Federation Doc.

5.   AOB

The call closed at 15:45 UTC