Security profile for CAMARA

[Bjorn Hjelm]

During the FAPI call on Nov. 29, there was a question whether the CAMARA project has a security profile or if the FAPI security profile would apply to the CAMARA project.

‌

[Bjorn Hjelm]

Based on conversations with representatives from CAMARA, there’s an interest to learn more about the FAPI Security Profile from the Identity & Consent Management SP. This outreach could be done during one of the regular Identity & Consent Management SP meetings or a separate workshop (or a combination of both).

[Bjorn Hjelm]

I received a proposal from the Identity & Consent Management SP for the Foundation to make a presentation on FAPI and Certification program on Dec. 20. As discussed on FAPI call on Dec. 13, it was agreed to provide an overview presentation of FAPI as well as the Certification program on the proposed date.

[Bjorn Hjelm]

There is a discussion on the way forward on the CAMARA OIDC Profile in CAMARA Identity & Consent Management (I&CM) SP issue #122 that members are encouraging to comment on. In short, the two options are to follow the FAPI 2 approach (#121) or Mobile Connect (#113) as the basis for the CAMARA OIDC Profile.