Attendees:

• Tomasz Wolniewicz, PIONIER
• Licia
• Yuri Demchenko
• Thomas Lenggenhager, SWITCH
• Andreas Solberg, UNINETT
• Lukas Haemmerle, SWITCH
• Mehdi
• Milan Sova
• Kristof
• Maja Gorecka-Wolniewicz, PIONIER

1. Metadata Distribution

Andreas will send a document with some ideas for requirements and specifications to the list within the next few days. This document then can be discussed on the mailing list first for 1-2 weeks before there will be a special meeting that will be organized and announced by Lukas.

Summary from Metadatas Aggregation Requirements meeting:

Different implementations was discussed at the meeting. What will be used in edugain, etc. Mikael B is working with the GN2 eduGAIN MDS in the eduGAIN task.

The topics of the meeting were announced as: * Review MDS specification document * Review input reported to the list before t...

Metadata Distribution

• Several updates on the simpleSAMLphp aggregator in pipeline. Good and useful feedback from Ian Young.
• Metadata Distribution Requirements; schedule new meeting to start brainstorming.

Lukas: Can volunteer to summarize some thoughts.

Josh, SA3: Review Jürgens document...

Andreas: send out a foodle on new meeting....

Include Mikael Berglund

User Centric Identity

OpenID document

Initial version provided by Licia. Andreas will circulate to focus-group, and schedule new meeting.

Miro lead a meeting... Andreas sends more info to Miro about that.

Virtual Organizations

Front-channel attribute aggregation

David: Discussion has proceded - tentative conclusions and work package description to be circulated to the list soon. I will return with more info to the list soon.

Andreas forwards mails from saml-dev list to Jaime...

SWITCH GMT Testing

Leif: My status report is that ...

Participants:

• David Simonsen, Wayf, david@wayf.dk
• Mads Freek Petersen, Wayf, freek@ruc.dk
• Andreas Åkre Solberg, UNINETT, Andreas.Solberg@uninett.no

Appologized:

• Jaime Perez, RedIRIS, jaime.perez@rediris.es
• Diego Lopez, RedIRIS, diego.lopez@rediris.es

The three protocol approaches was considered:

1. AttributeQuery frontchannel
2. AuthnRequest plain
3. AuthnRequst with saml:Attribute

Background material:

• Review of Front-Channel Attribute Aggregation Alternatives - (Mads Freek Petersen)

Wayf, which will be implementing the SP-Centric Attribute Aggregation Demo, has strong preferences for working with the AuthNRequest approach. The main reasons include:

• The possibility of including an AuthNContext in the Response.
• The...

General

Moved all content of the GÉANT wiki to https://rnd.feide.no/idfed in order to make it accessible to people outside this group.

Video Meetings will be status reports only. Then, we'll try to arrange working meetings with Adobe Connect on work items like:

• Front-channel attribute aggregation
• SWITCH GMT Cross-federation Testing
• Metadata distribution meeting

Metadata Distribution

• Testing status round.

Lukas suggestion on testing: Embedded Discovery Service using Javascript... Metadata aggregator needs to publish IdPs in a JSON format...

Maya reports that http://rnd.feide.no is not part of eduGAIN aggregator. Action Item: Andreas will add metadata for http://rnd.feide.no.

Arrange av VC. Andreas will send out a Foodle for a VC next week.

Aggregator updates

• Aggregator module is now documented:
  • https://rnd.feide.no/content/simplesamlphp-aggregator-module
• Aggregat...

Action for all - Provide feedback to the docs at:

• https://rnd.feide.no/content/identity-federations-current-status-and-planned-work

Andreas noted that there is a separate wiki page for each of the work items, so people are invited to provide comments.

Virtual Organizations

SWITCH VO Demo

VO demo form SWITCH is available for test. A test scenario is also described to add a user to one or more group. Really interesting work. Plan is to continue to test the demo service.

Two type of tests:

1. adding more VO services. It would be good to test a shib2 SP to connect to Lukas' VO. Leif offered a test SP for a test. Lukas noted that the latest release version is needed. Torsten volunteered an shib SP as well.
2. adding more IdPs (non-swiss) and connect them to the

Andreas said it would be nice to test Lukas' sw with a SimpleSAMLphp SP. However there is work still needed on the consumer side of t...