MACE Call 26-September-2011

**MACE Call 26-September-2011**

**Attending**
RL "Bob" Morgan, U. Washington (chair)
Ken Klingenstein, Internet2
Scott Cantor, The Ohio State U.
Michael Gettes, Carnegie Mellon U.
Jim Jokl, U. Virginia
Renee Shuey, Penn State U.
Keith Hazelton, U. Wisconsin - Madison
Steven Carmody, Brown U.
Tom Barton, U. Chicago
David Wasley, independent
Ann West, Internet2
Nate Klingenstein, Internet2
Steve Olshansky, Internet2 (scribe)

NEXT CALL: 10-October-2011
Theme: TBD

**New Action Items**
[AI] (Ken) will send out a link to a data plan of interest.

[AI] (All) Propose theme topics for the 10-October call via the list.

**Carryover Action Items**
[AI] (All) interested in participating in the OSIdM4HE effort contact Bob.
[AI] (All) discuss further ideas on IAM suite collaboration on the mailing list.
[AI] (All) send seedcorn suggestions to Ken.
[AI] (Ken) will distribute the CRU taxonomy of SPs
[AI] (Ken) will send out a link to relevant GENI IdM information.
[AI] (Keith) will write up the current state of the identifier discussion and apparent consensus, and associated explanatory material, for use by REFEDs.
[AI] (Ken) will coordinate a small working group with Heather to look into access control and IdM layer requirements for shared file services, calendaring, and web-conferencing in a federation-centric context.
[AI] (All) with suggestions for other foundations that the Shib Consortium could eventually be embedded in are encouraged to discuss them on the list.
[AI] (Ken) will convene a small subgroup of MACE to consider the seed corn issues in more depth and report back on a forthcoming call, soon.
[AI] (Ken) will invite Mike Conlin (U. Florida), the VIVO PI, to a forthcoming MACE call.
[AI] (Keith) will maintain an issues list to inform a potential new charter for MACE-DirNG, syncing it with the FedApps charter.
[AI] (RLBob, Scott, and SteveO) will proceed with the process of formalizing the FedApps working group, including setting up a list/wiki/website, and advertise it in the appropriate venues.
[AI] (Ken) will draft a one-pager about what MACE does and what questions it has, for review by MACE, as a discussion guide with Internet2 leadership.
[AI] (Ken) will distribute a draft requirements framework for VO support engagement
[AI] (David) will contact GSA for an update on the approval process for InCommon Silver.
[AI] (Ken) will send out info on DHS secure online transactions
[AI] (Ken) will follow up on a MACE/AMSAC call.
[AI] (Ken) will follow up with Kuali/Rice about I2MI collaboration.
[AI] (Ken) will draft a catalyst doc, covering the key items to be addressed in advising VOs how to use our infrastructure.
[AI] (Leif) will contact Ken/Steven/Tom about potential overlaps between the SDCI proposal and projects in the EU.
[AI] (Jens) will speak to an Eduroam rep about communicating with Educause.
[AI] (Ken) will draft and circulate a letter to Rice leadership, requesting input to roadmaps and use cases, and to ensure our projects with Kuali projects are aligned with their high-level strategic direction.
[AI] (Nate) will distribute information to the list about upcoming tactical issues facing MACE
[AI] (All) send Bamboo IAM comments to Tom ASAP for coordination.
[AI] (All) interested in participating in the international collaboration activity contact RL "Bob."
[AI] (RL "Bob") will contact a representative of Kuali Rice about coordinating a call.
[AI] (Ken and Mark) will distribute some information on trust anchors in the context of dynamic network configuration in GENI testbed, as well as for general access control.
[AI] (Ken) will circulate some meeting notes from the last TERENA/ REFEDS meetings.

**Recent Meetings**
- REFEDS
September 14, 2011, Helsinki, Finland
http://www.terena.org/events/details.php?event_id=2067

See minutes at https://refeds.org/meetings/sep11/slides/refeds-minutes-20110914-0.3.pdf

Policy and technical issues related to attribute release, especially in the EU, was the topic of Steven's session, with the assumption that solutions that satisfy these requirements will probably work elsewhere. Some of this builds on prior Edugain work, and is helping to clarify the issues and provide some guidance as to an acceptable path forward.

The functionality of a consent GUI to meet EU regulations was discussed, as was simplifying the process of attribute release. There are concerns about the usability and implementation of recommendations forthcoming, which may not be supported in current releases. Deployabilty challenges may lie ahead...

Ken presented about economics of federations, and what effects PEER may have on that; and how to incent federations to contribute human resources to REFEDS.

Consensus was that client cert efforts are best homed under TF-EMC2 rather than REFEDS.

- IRISC - Identity in Research Infrastructure and Scientific Communication
September 12-13, 2011, Helsinki
http://irisc-workshop.org/irisc2011-helsinki/

This is an EU group looking at many of the same issues that we are. There is interest in an international VO CAMP (aka VAMP), which would be a follow-up to this. More on this as it develops.

- OpenID OpenID “Connect Tech” Summit
September 12-13, 2011
https://openid.net/oidf-summits/
https://openid.net/connect/

Roland is very involved in this, supported by GEANT.

**Upcoming Meetings**
https://spaces.internet2.edu/display/MACECalendar/MACE+Calendar

- OIX
November 2011
http://openidentityexchange.org/

OpenID Connect interop will be a focus.

- Fall I2MM
October 3-6, 2011, Raleigh, NC
http://events.internet2.edu/2011/fall-mm/
There will be a mini-REFEDS meeting Sunday morning 2-Oct. 9am-noon. This will likely have little overlap with the group meeting in Helsinki, and the agenda is still in progress.

Dinner theater will be Joni Brennan, Executive Director of Kantara Initiative

- IIW
October 18, 2011, Mountain View, CA
http://www.internetidentityworkshop.com/
https://iiw13.eventbrite.com/

There will be an NSTIC day as part of this.

- PESC Data Summit
October 12-14, 2011, San Francisco, CA
http://www.pesc.org/interior.php?page_id=212
Ann will be attending.

This will include a session on the AdmitMe project, i.e. one central IdP for college applicants.
http://www.pesc.org/interior.php?page_id=214
https://spaces.internet2.edu/display/InCAdmissions/Home

- EDUCAUSE
October 18-21, 2011, Philadelphia
http://www.educause.edu/E2011

- Moonshot 3,
24 October 2011, Cambridge MA
http://www.project-moonshot.org/meeting3

- TF-EMC2 19,
Bologna, Italy, November 7-8, 2011
http://www.terena.org/activities/tf-emc2/meetings/19/

**Discussion**

- October 10 call theme?
- 2-factor?
- account linking again
- interrealm data management and curation issues, including access policies
- other suggestions encouraged, via the list.

[AI] (Ken) will send out a link to a data plan of interest.

[AI] (All) Propose theme topics for the 10-October call via the list.

- Followup on account linking discussion
See early one-pager at https://spaces.internet2.edu/display/fedapp/Account+Linking

This is relevant to several federal agencies, among others. This also arose on SocialID and AdmitMe calls, and is a topic that will likely gain serious traction sooner than later.

- OSIdM4HE update
There was a major call last week, at which the subgroups reported out.

Registries and provisioning seem to be logical focii ongoing.

The question arose as to how much effort should be expended on filling gaps, v. tying together existing solutions...

- The Kantara attribute management group is holding its first meeting today. Keith will be attending, and will report back as merited.
http://kantarainitiative.org/confluence/display/AMDG/Home