Attendees

• Mark Haine
• Nat Sakimura
• Torsten Lodderstedt
• Adam Cooper
• Alastair Treharne
• Alberto Pulido
• Anthony Nadalin
• Baber Amin
• Bjorn Hjelm
• Dima Postnikov
• Joseph Heenan
• Julian Coombes
• Kosuke Koiwai
• Nick Mothershaw
• Ralph Bragg
• Stephane Mouy
• Taylor Ongaro
• Wesley Dunnington
• Naohiro Fujie

Agenda

• External Orgs & Events
  • UK Cabinet Office Identity Assurance Program
  • TISA testing update
  • Any others
• Reminder that voting is open for Implementers’ draft 2
• PRs & Issues
  • Any Issues that attendees want to focus on?
  • Update on legal and privacy topics #1198 #1068 #1188
  • Work through open issues

External Orgs & Events

• UK Cabinet Office Identity Assurance Program - Alastair Treharne
  • Restructuring the trust framework, scheme in the public sector in the UK government.
  • It includes guidance, standards around identity proofing and verification and authentication requirements for identity providers to operate in the public sector.
  • Just updated these documents and having feedback from the industry, organizations have interest on working with the UK public sector.
  • Alastair had started to write a draft using OpenID Connect for use in the public sector in the UK and hope to have feedback from people involved in this working group.
  • Alastair will share the document on mailing list in the next or two weeks.
• TISA update - Nick and Mark
  • updated request/response on TISA use-case on the use-case branch.

Reminder that voting is open for Implementers’ draft 2

• Voting for Implementers' draft 2 is open until 18th.

PRs & Issues

• PR #30, Update on legal and privacy topics #1198 #1068 #1188
  • to make clear that this spec is scoping on technical topics, Torsten added a paragraph to explain the scope of this spec.
  • made changes on word usage, e.g. from 'attest' to more softer expressions.
  • Anthony proposed that using 'legal trust framework' rather than 'concrete trust framework'.
  • Assigned Anthony, Stephane, Nat as reviewer.
• PR #26
  • Torsten had reviewed and commented on the PR.

Conformance test - Joseph

• create a ticket to write up a list of the test cases.
• then, identify existing implementations to be tested.
• Joseph presumes that it is better building the test suite on OpenID Foundation's new Java Framework, and it would be a separate test modules from OpenID Connect core tests.
• for funding estimate, some sort of rough estimates is required.
• The goal of the test is not only conformance but also certification.