- idel-wg - lists.ogf.org

OIDC/OA4MP Specification v0.2 - please read and comment
by Sill, Alan 11 Jun '15

11 Jun '15

Dear IDEL-WG and FedSec-CG folks, Thought you would be interested in the following link. Please consider reading and commenting on this ongoing work by Jim Basney, Jeff Gaynor and Wendy Edwards. For further details, please see the message at the second link below. Topic: OpenID Connect for MyProxy Protocol Specification Version 0.2 (Dec 2014 - IN PROGRESS) Jim Basney <jbasney(a)illinois.edu> Jeff Gaynor <gaynor(a)illinois.edu> Wendy Edwards <wedwards(a)illinois.edu> Link: http://goo.gl/VnMKXS Further information: https://www.ogf.org/pipermail/idel-wg/2013-September/000011.html Alan P.S.: Happy new year!

3 5

Information on RFC 7517 "JSON Web Key (JWK)", May 2015
by Sill, Alan 22 May '15

22 May '15

Thought you would be interested in the following link. Topic: RFC 7517 "JSON Web Key (JWK)", May 2015 Abstract A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. This specification also defines a JWK Set JSON data structure that represents a set of JWKs. Cryptographic algorithms and identifiers for use with this specification are described in the separate JSON Web Algorithms (JWA) specification and IANA registries established by that specification. Link: http://www.rfc-editor.org/info/rfc7517 Alan

2 2

Mike Jones: Working Group Draft for OAuth 2.0 Act-As and On-Behalf-Of
by Sill, Alan 23 Sep '14

23 Sep '14

Thought you would be interested in the following link, from the blog of Mike Jones of Microsoft. Topic: There's now an OAuth working group draft of the OAuth 2.0 Token Exchange specification, which provides Act-As and On-Behalf-Of functionality for OAuth 2.0. This functionality is deliberately modelled on the same functionality present in WS-Trust. Link: http://self-issued.info/?p=1276 Alan

5 6

Fwd: [Nsi-wg] slides for NSI AA presentation Monday 22 September 2014
by Sill, Alan 23 Sep '14

23 Sep '14

FYI. Review and thoughts to the author are recruited (by me). Thoughts welcome on how we can improve communication among and between members of the OGF groups, and more widely between the networking and security portions of the community on this topic. Alan Begin forwarded message: From: Hans Trompert <hans.trompert(a)surfnet.nl<mailto:hans.trompert@surfnet.nl>> Date: September 19, 2014 at 12:40:29 PM CDT To: "nsi-wg(a)ogf.org<mailto:nsi-wg@ogf.org>" <nsi-wg(a)ogf.org<mailto:nsi-wg@ogf.org>> Subject: [Nsi-wg] slides for NSI AA presentation Monday 22 September 2014 Hi, Please find attached my slides for the NSI AA presentation Monday 22 September 2014 in Uppsala. Cheers, HansT.

3 2

OAuth2 certificate delegation
by Basney, Jim 16 Sep '13

16 Sep '13

Hi IDEL WG, Sorry I'll miss the Tuesday morning WG meeting, though I plan to remotely join the FedSec meeting later in the day if possible. In prior IDEL WG meetings I promised a draft spec on OAuth2 certificate delegation in MyProxy. I invite your comments on our v0.1 draft: http://redmine.ogf.org/dmsf_files/13113 - Word version http://goo.gl/VnMKXS - public Google Doc version http://goo.gl/T6VOty - editable Google Doc (contact me for edit access) It uses the OpenID Connect UserInfo endpoint to deliver information about the certificate subject and defines a GetCert endpoint for obtaining the certificate, using the OAuth authorization code flow supporting refresh tokens. It's a work in progress. We haven't released any code that implements it yet. Ideally it can be generalized to not be so MyProxy-focused. I think others are already doing something similar, so I'm curious to learn how it compares to other approaches. Thanks, Jim

2 1

Meeting at OGF 38a
by Jens Jensen 27 May '13

27 May '13

Folks, This may be a bit late but it has taken some time to get feedback from people. We should have a room for a couple of sessions on Thursday afternoon for security stuff. As I haven't had much feedback on proposals for the security area, I suggest we use the first for CAOPS/IGTF and the second for FEDSEC/IDEL/VOMSPROC. There should be enough time to get something useful done in the groups. It is possible we may not have a projector? In which case we could use some form of screen sharing. See you in Maastricht! -j

1 0

Some gentle reminders...
by Jens Jensen 24 May '13

24 May '13

Folks, First of all a reminder that everybody's favourite document, GFD.125-bis is still available for public comments, until 10 May: http://redmine.ogf.org/projects/editor-pubcom/boards/8 Secondly, there is an OGF coming up which as you will just have been informed is in an entanglement between two locations. The XSEDE schedule is here: https://www.xsede.org/web/xsede13/schedule but doesn't seem to have any security area content other than the OGF (although I may have missed it); TNC does have identity management and federations on Tuesday https://tnc2013.terena.org/core/schedule/list/day/04%252F06%252F2013 (although they're parallel!) They are not even at the same time, so you could attend both! If you are a group chair of one of the security area groups, please let me know what you're planning. If you are in a group and not a group chair, can you please let your group chair know? Thanks --jens

4 3

OGF37 Arrangements and sessions
by Mike Jones 31 Jan '13

31 Jan '13

Folks, It's time to register sessions of OGF37. There's noise from IDEL participants and we should schedule that this group meets. And I should be in a position to circulate a strawman on the gridsite delegation info doc real soon™. CA-ops mentioned that OGF37 was scheduled close to another similar meeting and folk might not be able to make it; I believe we should at least meet for one session to keep things ticking forward, but am happy to apply for more than 1 session if we thing there are items to discuss. If we will not be quorate then perhaps we should not have CA-ops VOMS proc has a straw-man doc that we need to work on so we need to schedule this session. Questions then: 1, Who will make it to OGF37 2, do we need 3 or 4 sessions to cover work (assuming CA-OPS)? 3, do we suspend CA-ops this time due to participation? also, 3, Jens Are you going, and is there a FedSec session? Rgds, Mike

4 4

OGF36 IDEL Agenda and colaborative Minutes Google Doc
by Mike Jones 09 Oct '12

09 Oct '12

Dear all, The IDEL session is set for tomorrow 08:30 Central time. The Agenda is here http://bit.ly/OGF36IDEL, please feel free to add AOBs and notes. Mike

1 0