May 15, 2015 UXC Meeting Page

USER EXPERIENCE COMMITTEE MEETING NOTES -- approved July 28, 2015

Attendees:

• Mary Hodder
• Ann Racuya-Robbins
• Suzanne Lightman
• Noreen Whysel
• Paul Knight
• Jamie Clark
• Linda Braun, Global Inventures

Meeting Notes

• Recording Minutes Recording Policy link (https://www.idecosystem.org/page/recording-policy-conduct-meetings) Linda to send a copy of the WebEx recording to Mary Hodder and Ann Racuya-Robbins.
• No prior minutes were posted for approval.
• Current Work and Activities Discussion

̶ The UXC reviewed and commented on FMO’s feedback to the UXC requirements that was sent on May 12.

̶ UXC needs to agree on comments in bold. Requirements were delivered by FMO in a Word document and UXC will comment back in Word even though most people preferred to use Excel. Any edits to the changes/comments made by FMO are due May 22.

Changes made here: NEW NUMBER: USABLE-1 OLD NUMBER: UX-1 (portion, modified) SHORT NAME: USABILITY ASSESSMENT

REQUIREMENT STATEMENT (normative): Entities** MUST assess the usability of the [communications, interfaces, policies, data transactions and end-to-end processes] they provide and conduct in digital identity management functions.

APPLIES TO ROLES: IDENTITY-PROVIDERS, RELYING-PARTIES, FEDERATIONS, USERS APPLIES TO ACTIVITY TYPES: REGISTRATION, CREDENTIALING, AUTHENTICATION, AUTHORIZATION, INTERMEDIATION OTHER KEYWORDS: ASSESSMENT

REFERENCES AND GUIDANCE (nonnormative): See "Usability Evaluation Methods" (US DHHS 2015): http://www.usability.gov/how-to-and-tools/methods/usability-evaluation/index.html; Jakob Nielsen's Heuristics evaluation methodology, summarized at http://www.nngroup.com/topic/heuristic-evaluation/ and http://en.wikipedia.org/wiki/Heuristic_evaluation. Normative Definitions (could be used in glossary for all requirements):

• Definition of processes or “pathways” TBD.
  • Expecting response from FMO re: humans v. non-humans definition in supplemental.

- NOTE: could add guidance for error correction by end users for their assessment answers.

SUPPLEMENTAL INFORMATION (nonnormative): Entities may satisfy this requirement by confirming that they have conducted a usability assessment of their digital identity management functions. Other requirements and best practices in this set address their duty to mitigate issues identified in that assessment. "Digital identity management functions" includes each of the functions described in the IDESG Functional Model (registration, credentialing, authentication, authorization, and intermediation), which also encompass enrollment, identity proofing, identity vetting, access control, attribute management, transaction processing, and identity data maintenance

NEW NUMBER: USABLE-2 OLD NUMBER: UX-1 (portion, modified) SHORT NAME: USABILITY PRACTICES

Entities providing and conducting digital identity management functions or transactions MUST apply recognized, appropriate usability guidelines and practices to the [communications, interfaces, policies and data transactions] they offer, and remediate significant*** defects identified by their usability assessment.

APPLIES TO ROLES: IDENTITY-PROVIDERS, RELYING-PARTIES APPLIES TO ACTIVITY TYPES: REGISTRATION, CREDENTIALING, AUTHENTICATION, AUTHORIZATION, INTERMEDIATION OTHER KEYWORDS: ASSESSMENT, REMEDIATION

REFERENCES AND GUIDANCE (nonnormative): . See Jakob Nielsen's Heuristics list, summarized at http://www.nngroup.com/topic/heuristic-evaluation/ and http://en.wikipedia.org/wiki/Heuristic_evaluation. See the "Usability Guidelines" database (US DHHS 2015): http://guidelines.usability.gov/ Consult the UXC Resources page located here for additional examples: https://www.idecosystem.org/wiki/UXC_resources

SUPPLEMENTAL INFORMATION (nonnormative): This requirement requires that entities confirm that they have responded to and remediated material*** defects raised by their usability assessment (other than trivial*** defects), but does not require a specific methodology or measurement approach.

• • • define term (either significant or material) and give way to measure (measurements and methodology)?

Meeting adjourned at 1:32p.m., EDT. Next regular meeting scheduled for May 19, 2015. UXC will continue with the review/edit of this work.