Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Section
Column
width70%

This Work Group operates under the Kantara IPR Policy - Option Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non discriminatory (RAND) (HTML version). You can find any opt-outs on this page.

Home | FAQ | Protocol Spec | Trust Model Spec | Chat | Intro | Join | WG-UMA List | UMA-dev list | Archive (Mailman) | Archive (Google) | Calendar

Image Removed


Mike Schwartz of Gluu reports that "OpenID Connect and UMA Apache HTTPD Plugins Are On the Way!" Gluu even commissioned a piece of artwork for the occasion. Stay tuned for news on how you can leverage these plugins
Panel
borderColor#99cc00
bgColor#ffffff
borderWidth4pt
titleCrowdTilt campaign has tilted!
UMA2 has an active business-legal framework workstream

Image Added

The premise of the Work Group's report A Proposed Licensing Model for User-Managed Access is that UMA enables the individual to centrally manage access and use rights with respect to personal digital assets by converting permission tokens into machine-readable licenses. The group is working on a companion document that outlines a larger business-legal framework for achieving a wide variety of rights delegation use cases involving UMA technology.

Here are the UMA Grant (PDF, HTML for deep linking) and UMA Federated Authorization Recommendations (PDF, HTML for deep linking). Don't miss the UMA2 masterclass delivered by two UMAnitarians at the Identiverse conference in Boston in June 2018 (slides and video). (The slides and video from the previous year's Authorization: Age of UMA session set in the Marvel Cinematic Universe was also a big hit!) The Release Notes review all final UMA1-to-UMA2 changes. See also the UMA Implementer's Guide, our list of known Implementations, and discussions of Case Studies. Finally, see the detailed UMA Grant sequence diagram and FedAuthz sequence diagram.

Panel
borderColor#7f7f7f
borderWidth0
Image Removed
The purpose of the UMA Work Group (charter) is to develop specs that let an individual control the authorization of data sharing and service access made between online services on the individual's behalf, and to facilitate interoperable implementations of the specs. Read the spec

Image Added

User-Managed Access (UMA) is an award-winning OAuth-based protocol designed to give an individual a unified control point for authorizing who and what can get access to their digital data, content, and services, no matter where all those things live. Read the specs, join the group, check out the implementations,

test your interop

follow us on Twitter, like us on Facebook, get involved!

Follow us on Twitter – our handle is @UMAWG and we often use the hashtag #UMAWG. (Short

The group is currently working on extensions to UMA V2.0.

The short link for this page is http://tinyurl.com/umawg

– spread the word

.

) Find us on Facebook too.
  


News:

  • October 31: Check out the "assembly cut" of the first UMA demo video here. Thanks to Dazza Greenwood for being our video producer!
  • October 31: A new minor revision, rev 08a, of the UMA core spec is up. The only "breaking change" is to align with OAuth (RFC 6749) in requiring TLS usage.
  • October 29: Booooooooo! You can find refreshed UMA 101 slides here (PDF, PPTX).
  • September 29: We've gotten the UMA-dev list going again, to support interop and implementation discussions. If you're an implementer or like following along with these types of conversations, please join!
  • September 28: The PII 2013 conference's Ignite talk about UMA is now available! See the video and get the slides.
  • September 12: Lots of news lately. There's a new FAQ about UMA's relationship to the NSTIC IDESG effort. And the CrowdTilt campaign to build UMA and OpenID Connect Apache plugins "tilted"! Development is already under way.
  • August 24: The Interop Testing wiki section is getting fleshed out. Check out the feature tests and register to participate! We'll hold an official interop event in early 2014, but may begin virtual interop testing earlier.
  • August 1: The Work Group just approved the current drafts of the core UMA spec, the Resource Set Registration spec, and the Binding Obligations spec as Kantara Initiative Draft Recommendations. (Links are to pretty-printed versions of the IETF individual Internet-Drafts that were approved.)
  • June 30: Find a list of known third-party profiles related to UMA on the new Third-Party Profiles wiki page! If you know of other written profiles, please give us a heads-up.
  • 16 Jul '20: Make sure to register for the new Kantara UMA webinar taking place on July 21st at 1pm ET – it will be all about health info interop and user control, and will include a demonstration.
  • 22 Nov '19: There's a new implementation up on the Implementations page: PatientShare from Lush Group. It's also an implementation of the HEART profiles. Read all about it and check it out!
Column
Column
width5%
 

Column
width25%
Leadership
  • Chair: Eve Maler
  • Vice-Chair: Maciej Machulak
  • Full leadership team list
  • Read about Kantara leadership roles
Teleconference Info

 

 

Column
width5%
 
Section