F2F WG Meeting @ RSA 2012

Venu: Microsoft Office at Westfield Centre Conf Room SF/Pacifica-7120 835 Market St. Suite 100 San Francisco, CA 94103

Time: Friday, March 2, 2012 from 9:00 AM to 1:00 PM (PT)

Registration: http://openid-rsa-interop.eventbrite.com/

Attendee: Aravindan Ranganathan Breno de Medeiros Blog: https://plus.google.com/u/0/106840581685558577500/ Christopher McDaniel Greg Keegstra Isa Lee Naveen Agarwal Michael Schwartz Blog: gluu.org/blog Malla Simhachalam Nebojsa Pesic Don Thibeau Edmund Jay John Bradley Blog: http://thread-safe.net Nat Sakimura Blog: http://www.sakimura.org/en/ Mike Jones Blog: http://self-issued.info/

Agenda

1. Interim Report on the Interop Progress (Mike)

2. Pending Issues

• Title ? ! State Responsible Component Milestone Date created

• #552: Registration - 2.1: id_token/userinfo signed/encrypted response algs attribute key should be singular? bug major new unassigned 1 day ago

• #543: Messages - 8. Add Threats and controls enhancement major open Nat Sakimura Messages Final 14 days ago

• #536: Messages, Multi Token Response, add hash of token to id_token enhancement major new unassigned 21 days ago

• #547: Messages 2.1.2.1.1.1 - Spec not clear that user_id claim must be explicitly requested in userinfo claims member bug major new unassigned 12 days ago

• #538: Session - 0. Write the new sketch of the Session Management spec. task blocker new brenodemedeiros Session 17 days ago

• #513: Basic 1.2, Messages 8.14, Discovery 3.1, 3.2 - Issuer Identifier can not contain a path component bug critical open John Bradley 2012-01-20

• #539: Messages - 0. Add scope for offline access enhancement major new unassigned 17 days ago

• #535: Messages add id_token to Authorization Request enhancement major new unassigned 21 days ago

• #523: Messages 2.1.4 - session_selection_required is leaking PII bug major open brenodemedeiros 2012-01-20

• #521: Messages 2.1.2.1, etc. - Questioning the ID Token model bug critical open John Bradley 2012-01-20

• #514: Basic 2.2.1, Messages 2.1.2 - Embedded display limitations not clear (editorial) bug minor open brenodemedeiros 2012-01-20

• #508: JWT : 7 : Encoded JWS Ciphertext -> Encoded JWE Ciphertext ? bug major open Michael Jones 2012-01-17

• #510: Messages, Basic - Proposal for adding hash to id_token enhancement major new John Bradley 2012-01-18

• #492: Discovery - Register openid-configuration with well-known URI Registry task major new Michael Jones 2011-12-22

3. Session Management Spec.

4. AOB