Framework Profiles - Revision history

Tomjones: /* Solutions */

2018-12-15T21:22:06Z

Solutions

← Older revision		Revision as of 21:22, 15 December 2018
Line 33:		Line 33:
	*A [http://identitymeme.org/doc/draft-hodges-saml-openid-compare-05.html draft Technical Comparison of OpenID and SAML] is available to help create coverage of both specs.		*A [http://identitymeme.org/doc/draft-hodges-saml-openid-compare-05.html draft Technical Comparison of OpenID and SAML] is available to help create coverage of both specs.
	*The [https://www.incommon.org/federation/ InCommon Federation] is the U.S. education and research identity federation, providing a common [[SAML 2.0]] framework for trusted shared management of access to online resources.		*The [https://www.incommon.org/federation/ InCommon Federation] is the U.S. education and research identity federation, providing a common [[SAML 2.0]] framework for trusted shared management of access to online resources.
	*OpenID has a [https://openid.net/specs/openid-connect-federation-1_0.html draft federation document] that could server as a template for an API based on [[OpenID Connect]] and extending the InCommon effort. It is designed specifically to work for enterprise cases where the user has signed away their privacy rights.		*OpenID has a [https://openid.net/specs/openid-connect-federation-1_0.html draft federation document] that could server as a template for an API based on [[OpenID Connect 1.0]] and extending the InCommon effort. It is designed specifically to work for enterprise cases where the user has signed away their privacy rights.
	===Profiles===		===Profiles===
	As each community begins the process of creating profile the committee will coordinate and record their efforts here:		As each community begins the process of creating profile the committee will coordinate and record their efforts here:

Tomjones: /* References */

2018-12-03T19:57:17Z

References

← Older revision		Revision as of 19:57, 3 December 2018
Line 42:		Line 42:

	==References==		==References==
	*[https://www.openidentityexchange.org/wp-content/uploads/2018/11/OIX-White-Paper_Self-Certification-Mandatory-Assessment-Regimes_2018-11-07-.pdf A paper from the OIX comparing self-certification to mandatory assessment schemes.]		*[https://www.openidentityexchange.org/wp-content/uploads/2018/11/OIX-White-Paper_Self-Certification-Mandatory-Assessment-Regimes_2018-11-07-.pdf A paper from the OIX comparing self-certification to mandatory assessment schemes.] (2018-11)
	*[http://openid.net/specs/openid-connect-federation-1_0.html OpenID Connect Federation 1.0] and the references in that document define most of the terms used in the Federation API. It assumes an enterprise solution where users are not free to chose the federation that they will trust.		*[http://openid.net/specs/openid-connect-federation-1_0.html OpenID Connect Federation 1.0] and the references in that document define most of the terms used in the Federation API. It assumes an enterprise solution where users are not free to chose the federation that they will trust.
	*[https://openid.net/specs/openid-connect-federation-1_0-04.html Draft 4 is the working OID federation document for this work]. The above link points to a more current draft that has some defects.		*[https://openid.net/specs/openid-connect-federation-1_0-04.html Draft 4 is the working OID federation document for this work]. The above link points to a more current draft that has some defects.

Tomjones: /* References */

2018-12-03T19:56:20Z

References

← Older revision		Revision as of 19:56, 3 December 2018
Line 42:		Line 42:

	==References==		==References==
	*[http://openid.net/specs/openid-connect-federation-1_0.html OpenID Connect Federation 1.0] and the references in that document define most of the terms used in the Federation API.		*[https://www.openidentityexchange.org/wp-content/uploads/2018/11/OIX-White-Paper_Self-Certification-Mandatory-Assessment-Regimes_2018-11-07-.pdf A paper from the OIX comparing self-certification to mandatory assessment schemes.]
			*[http://openid.net/specs/openid-connect-federation-1_0.html OpenID Connect Federation 1.0] and the references in that document define most of the terms used in the Federation API. It assumes an enterprise solution where users are not free to chose the federation that they will trust.
	*[https://openid.net/specs/openid-connect-federation-1_0-04.html Draft 4 is the working OID federation document for this work]. The above link points to a more current draft that has some defects.		*[https://openid.net/specs/openid-connect-federation-1_0-04.html Draft 4 is the working OID federation document for this work]. The above link points to a more current draft that has some defects.

	[[Category:Glossary]]		[[Category:Glossary]]
	[[Category:Profile]]		[[Category:Profile]]

Tomjones: /* Solutions */

2018-12-03T18:46:14Z

Solutions

← Older revision		Revision as of 18:46, 3 December 2018
Line 32:		Line 32:
	*A [https://tcwiki.azurewebsites.net/index.php?title=Federation_Trust_Registry Federation Trust Registry] is proposed to strongly identify framework participants.		*A [https://tcwiki.azurewebsites.net/index.php?title=Federation_Trust_Registry Federation Trust Registry] is proposed to strongly identify framework participants.
	*A [http://identitymeme.org/doc/draft-hodges-saml-openid-compare-05.html draft Technical Comparison of OpenID and SAML] is available to help create coverage of both specs.		*A [http://identitymeme.org/doc/draft-hodges-saml-openid-compare-05.html draft Technical Comparison of OpenID and SAML] is available to help create coverage of both specs.
	*The [https://www.incommon.org/federation/ InCommon Federation] is the U.S. education and research identity federation, providing a common framework for trusted shared management of access to online resources		*The [https://www.incommon.org/federation/ InCommon Federation] is the U.S. education and research identity federation, providing a common [[SAML 2.0]] framework for trusted shared management of access to online resources.
			*OpenID has a [https://openid.net/specs/openid-connect-federation-1_0.html draft federation document] that could server as a template for an API based on [[OpenID Connect]] and extending the InCommon effort. It is designed specifically to work for enterprise cases where the user has signed away their privacy rights.
	===Profiles===		===Profiles===
	As each community begins the process of creating profile the committee will coordinate and record their efforts here:		As each community begins the process of creating profile the committee will coordinate and record their efforts here:

Tomjones: /* Goals */

2018-11-27T23:09:17Z

Goals

← Older revision		Revision as of 23:09, 27 November 2018
Line 6:		Line 6:
	*As a part of the creation of a set of [[Identity Ecosystem]]s this plan lays out how to address specific community needs for security, privacy, interoperability and user experience. It is expected that all communities will start from the Baseline Functional Requirements (as amended from time to time) and add additional requirements in those four areas plus the potential for a trusted laboratory validation of compliance with the profiles.		*As a part of the creation of a set of [[Identity Ecosystem]]s this plan lays out how to address specific community needs for security, privacy, interoperability and user experience. It is expected that all communities will start from the Baseline Functional Requirements (as amended from time to time) and add additional requirements in those four areas plus the potential for a trusted laboratory validation of compliance with the profiles.
	*Compliance results are freely available for query by any potential participant prior to any engagement using a standard web [[API]]. Potential users need to understand the results before they commit to joining in any framework.		*Compliance results are freely available for query by any potential participant prior to any engagement using a standard web [[API]]. Potential users need to understand the results before they commit to joining in any framework.
	*[[Attestation]] of profiles compliant to the IDEF registry will be freely available to anyone with access to a web browser.		*[https://tcwiki.azurewebsites.net/index.php?title=Attested Attestation] of profiles compliant to the IDEF registry will be freely available to anyone with access to a web browser.
	*[[Attestation]] from profiles need not be free. Joining any framework will likely be costly in terms of money and effort. Getting an attestation or certificate of membership is a value that must be paid for. The source of funding is not specified but could include charging for access to attested results, for example the acquisition of a signed or encrypted certificate of membership need not be freely available.		*[https://tcwiki.azurewebsites.net/index.php?title=Attested Attestation] from profiles need not be free. Joining any framework will likely be costly in terms of money and effort. Getting an attestation or certificate of membership is a value that must be paid for. The source of funding is not specified but could include charging for access to attested results, for example the acquisition of a signed or encrypted certificate of membership need not be freely available.
	*[[Attestation]] of the [[Entity Statement]] is required as it must be signed, typically as as signed JWT or as signed and encrypted JOSE if [[User Private Information]] is present. This is not to be treated as a contradiction of the previous statement about framework membership for [[Entity]] information, which is '''never Private'''. There is no requirement that the [[Entity Statement]] be available at no cost.		*[https://tcwiki.azurewebsites.net/index.php?title=Attested Attestation] of the [[Entity Statement]] is required as it must be signed, typically as as signed JWT or as signed and encrypted JOSE if [[User Private Information]] is present. This is not to be treated as a contradiction of the previous statement about framework membership for [[Entity]] information, which is '''never Private'''. There is no requirement that the [[Entity Statement]] be available at no cost.
	*The first goal is a working example of a framework using the OpenID federation in JSON with follow-up work in SAML and XML.		*The first goal is a working example of a framework using the OpenID federation in JSON with follow-up work in SAML and XML.

Tomjones: /* Profiles */

2018-11-26T15:34:40Z

Profiles

← Older revision		Revision as of 15:34, 26 November 2018
Line 38:		Line 38:
	# [[Financial Profile]] now considering the creation of a specific implementation of a [[Financial Profile Sandbox]] for compliance testing.		# [[Financial Profile]] now considering the creation of a specific implementation of a [[Financial Profile Sandbox]] for compliance testing.
	# [[Vulnerable Populations]], such as [https://www.oixnet.org/registry/minors-trust-framework/ Minor's Trust Framework], is one example of a horizontal profile that could be developed.		# [[Vulnerable Populations]], such as [https://www.oixnet.org/registry/minors-trust-framework/ Minor's Trust Framework], is one example of a horizontal profile that could be developed.
			# [[Privacy Profile]] to track the progress of the NIST

	==References==		==References==

Tomjones: /* Solutions */

2018-11-25T16:37:34Z

Solutions

← Older revision		Revision as of 16:37, 25 November 2018
Line 29:		Line 29:
	*OpenID has a draft federation document that could server as a template for an API.		*OpenID has a draft federation document that could server as a template for an API.
	*The working document for the [[Trust Framework Membership Validation]] APIs has been under development since August 2017.		*The working document for the [[Trust Framework Membership Validation]] APIs has been under development since August 2017.
	*A [http://trustregistry.us-east-2.elasticbeanstalk.com/Registry working sandbox is now available]. The query string has not be enabled as there are only 11 entries. I will be enabled when the list is longer. At that time it is expected that the columns will enable sort, so that the most favorable entry is at the top.		*A [http://trustregistry.us-east-2.elasticbeanstalk.com/Registry working sandbox is now available]. The query string has not be enabled as there are only 11 entries. It will be enabled when the list is longer. At that time it is expected that the columns will enable sort, so that the most favorable entry is at the top.
	*A [https://tcwiki.azurewebsites.net/index.php?title=Federation_Trust_Registry Federation Trust Registry] is proposed to strongly identify framework participants.		*A [https://tcwiki.azurewebsites.net/index.php?title=Federation_Trust_Registry Federation Trust Registry] is proposed to strongly identify framework participants.
	*A [http://identitymeme.org/doc/draft-hodges-saml-openid-compare-05.html draft Technical Comparison of OpenID and SAML] is available to help create coverage of both specs.		*A [http://identitymeme.org/doc/draft-hodges-saml-openid-compare-05.html draft Technical Comparison of OpenID and SAML] is available to help create coverage of both specs.

Tomjones: /* References */

2018-11-06T21:00:55Z

References

← Older revision		Revision as of 21:00, 6 November 2018
Line 40:		Line 40:

	==References==		==References==
	*[http://openid.net/specs/openid-connect-federation-1_0.html OpenID Connect Federation 1.0] and the references in that document define most of the terms used in the Federation ~~Operator section above~~.		*[http://openid.net/specs/openid-connect-federation-1_0.html OpenID Connect Federation 1.0] and the references in that document define most of the terms used in the Federation API.
	*[https://openid.net/specs/openid-connect-federation-1_0-04.html Draft 4 is the working OID federation document for this work]. The above link points to a more current draft that has some defects.		*[https://openid.net/specs/openid-connect-federation-1_0-04.html Draft 4 is the working OID federation document for this work]. The above link points to a more current draft that has some defects.

	[[Category:Glossary]]		[[Category:Glossary]]
	[[Category:Profile]]		[[Category:Profile]]

Tomjones: /* References */

2018-11-06T21:00:04Z

References

← Older revision		Revision as of 21:00, 6 November 2018
Line 40:		Line 40:

	==References==		==References==
	*[http://openid.net/specs/openid-connect-federation-1_0.html OpenID Connect Federation 1.0] and the references in that document define most of the terms used in the Federation ~~Office~~ section above.		*[http://openid.net/specs/openid-connect-federation-1_0.html OpenID Connect Federation 1.0] and the references in that document define most of the terms used in the Federation Operator section above.
	*[https://openid.net/specs/openid-connect-federation-1_0-04.html Draft 4 is the working OID federation document for this work]. The above link points to a more current draft that has some defects.		*[https://openid.net/specs/openid-connect-federation-1_0-04.html Draft 4 is the working OID federation document for this work]. The above link points to a more current draft that has some defects.

	[[Category:Glossary]]		[[Category:Glossary]]
	[[Category:Profile]]		[[Category:Profile]]

Tomjones: /* References */

2018-10-30T20:14:14Z

References

← Older revision		Revision as of 20:14, 30 October 2018
Line 41:		Line 41:
	==References==		==References==
	*[http://openid.net/specs/openid-connect-federation-1_0.html OpenID Connect Federation 1.0] and the references in that document define most of the terms used in the Federation Office section above.		*[http://openid.net/specs/openid-connect-federation-1_0.html OpenID Connect Federation 1.0] and the references in that document define most of the terms used in the Federation Office section above.
	*[https://openid.net/specs/openid-connect-federation-1_0-04.html Draft 4 is the working document ~~now~~]. The above link points to a more current draft that has some defects.		*[https://openid.net/specs/openid-connect-federation-1_0-04.html Draft 4 is the working OID federation document for this work]. The above link points to a more current draft that has some defects.

	[[Category:Glossary]]		[[Category:Glossary]]
	[[Category:Profile]]		[[Category:Profile]]