Hi Duane here are the notes I made at OGF20 when attending the session. Perhaps this could be discussed tonight as well The profile is only half a fix to the real problem since it will only allow a grid service provider (SP) to know who you are, without knowing what you are entitled to do. However, it should not be too difficult to extend the current work to provide a fuller more complete solution, by borrowing some of the ideas used by Microsoft Cardspace and Trust Negotiation, in which SP’s publish the authorisation tokens that they require, and IDPs publish the authz tokens they can issue. In this way a user should be able to easily marry the two together in order to ensure that he can get access to the resources he is entitled to. regards David Duane Merrill wrote:

A quick agenda note to everyone attending this call tonight: I will be discussing the transition of these documents to target the WS-SecurityPolicy grammar, as well as addressing any comments on the original set. I will forward the refactored versions shortly; I apologize for not having them out sooner.

Cheers,

Duane

Google Calendar wrote:

...

Google Calendar <http://www.google.com/calendar/>

ogsa-wg@ogf.org, this is a reminder for

Express Authentication Profile (Andrew Grimshaw and Duane Merrill)

2007-06-18 17:00 - 18:00 (Central Time) http://ogsa.glance.net/ (map <http://maps.google.com/maps?q=http%3A%2F%2Fogsa.glance.net%2F&hl=en>) Calendar:

When: 6-7pm EDT, 5-6pm CDT, 3-4pm PDT, 7-8am JST, 11pm-midnight UK The dial-in number for Monday; US: +1 718 3541071 (New York) or +1 408 9616509 (San Jose) UK: +44 (0)207 3655269 (London) Japan: +81 (0)3 3570 8225 (Tokyo) PIN: 4371991 See more information: - https://forge.gridforum.org/sf/go/wiki1477 Screen share service: URL: http://ogsa.glance.net/ Usage: https://forge.gridforum.org/sf/go/wiki1584 Note: ** OGF IPR POLICY APPLIES ** http://www.ogf.org/About/abt_policies.php 1) Early discussion Social study notification - https://forge.gridforum.org/sf/go/wiki1717 Note taker assignment Roll call Minutes approval Action Item Review Agenda bashing 2) Express Authentication Profiles review (Andrew and Duane) Current drafts (4 documents) - http://forge.ogf.org/short/ogsa-wg/spuc Issue tracker - http://forge.ogf.org/short/ogsa-wg/isuc - http://forge.ogf.org/short/ogsa-wg/spsa - http://forge.ogf.org/short/ogsa-wg/spss - http://forge.ogf.org/short/ogsa-wg/spst Blair's comments Minutes approval Apr. 31: https://forge.gridforum.org/sf/go/doc14579 Action Item review More event details » <http://www.google.com/calendar/event?action=VIEW&eid=dnA4NWFuMGhzYmszNm1uYTVnNGRpZWZmOGMgb2dzYS13Z0BvZ2Yub3Jn&tok=MTcjb2dzYS53Z0BnbWFpbC5jb21hNjcxOTJhNWRlODhiOTE4NzQ0MDhkOTJkMGRjM2JlNDM0OTJmYjVj&ctz=America%2FChicago&hl=en>

You are receiving this courtesy email at the account ogsa-wg@ogf.org because you are an attendee of this event.

To stop receiving future notifications for this event, decline this event. Alternatively you can sign up for a Google Calendar account at http://www.google.com/calendar/ and control your notification settings for your entire calendar.

------------------------------------------------------------------------

-- ogsa-wg mailing list ogsa-wg@ogf.org http://www.ogf.org/mailman/listinfo/ogsa-wg

------------------------------------------------------------------------

-- ogsa-wg mailing list ogsa-wg@ogf.org http://www.ogf.org/mailman/listinfo/ogsa-wg

-- ***************************************************************** David W. Chadwick, BSc PhD Professor of Information Systems Security The Computing Laboratory, University of Kent, Canterbury, CT2 7NF Skype Name: davidwchadwick Tel: +44 1227 82 3221 Fax +44 1227 762 811 Mobile: +44 77 96 44 7184 Email: D.W.Chadwick@kent.ac.uk Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html Research Web site: http://www.cs.kent.ac.uk/research/groups/iss/index.html Entrust key validation string: MLJ9-DU5T-HV8J PGP Key ID is 0xBC238DE5 *****************************************************************

Following on from our telecon last night, I thought I would jot down the equivalent Authz info that should be made available to match the authn info that you are currently proposing to publish in endpoint references. See the attached word doc regards David -- ***************************************************************** David W. Chadwick, BSc PhD Professor of Information Systems Security The Computing Laboratory, University of Kent, Canterbury, CT2 7NF Skype Name: davidwchadwick Tel: +44 1227 82 3221 Fax +44 1227 762 811 Mobile: +44 77 96 44 7184 Email: D.W.Chadwick@kent.ac.uk Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html Research Web site: http://www.cs.kent.ac.uk/research/groups/iss/index.html Entrust key validation string: MLJ9-DU5T-HV8J PGP Key ID is 0xBC238DE5 *****************************************************************