The three main UMA Version 0.9 specifications – UMA Core, OAuth Resource Set Registration, and UMA Claim Profiles – are out for a 45-day public review period ending September 6 at 17:00 Pacific time. This review is in preparation for advancement of these specs as Kantara Initiative Recommendations. If you have specification comments or IPR review comments, be sure to follow the commenting instructions. The UMA group will also be holding a virtual and in-person interop testing event during the week of IIW XIX (Oct 28-30). To find out more, subscribe to the UMA-dev list
UMA2 has an active business-legal framework workstream
Image Added
The premise of the Work Group's report A Proposed Licensing Model for User-Managed Access is that UMA enables the individual to centrally manage access and use rights with respect to personal digital assets by converting permission tokens into machine-readable licenses. The group is working on a companion document that outlines a larger business-legal framework for achieving a wide variety of rights delegation use cases involving UMA technology.
Image Removed The purpose of the UMA Work Group (charter) is to develop specs that let an individual control the authorization of data sharing and service access made between online services on the individual's behalf, and to facilitate interoperable implementations of the specs. Read thespec
Image Added
User-Managed Access (UMA) is an award-winning OAuth-based protocol designed to give an individual a unified control point for authorizing who and what can get access to their digital data, content, and services, no matter where all those things live. Read the specs, join the group, check out the implementations,
August 17: Got a use case for UMA? Want help documenting a case study? See the new UMA case study worksheet PowerPoint slide deck, which can help you create a custom set of diagrams to describe your unique circumstances. Also see examples of other case studies on our dedicated Case Studies page.
July 24: Check out the latest entry on our Case Studies page: an industrial IoT authorization case study submitted by Intel. In the new Internet of Things, refrigerated shipping containers are resource servers and ships are clients.
July 24: The UMA group will be holding a virtual and in-person interop testing event during the week of IIW XIX (Oct 28-30). To find out more, subscribe to the UMA-dev list.
May 14: UMA was one of the recipients of a European Identity Conference award today! Find the news on our Facebook page (and "like" us while you're at it).
March 29: Did you know there's an open-source Apache server plugin that supports UMA? Check it out on our Implementations page. Thanks to Gluu and its partners for making this plugin happen!
Check out the "assembly cut" of the UMA demo videohere. Thanks to Dazza Greenwood for being our video producer!
22 Nov '19: There's a new implementation up on the Implementations page: PatientShare from Lush Group. It's also an implementation of the HEART profiles. Read all about it and check it out!
3 Oct '19: Chair Eve Maler and vice-chair Maciej Machulak have been re-elected to their positions for an annual term. See the Leadership Team page for a full list.
1 Oct '19: Did you know that the UMA Work Group has an active business-legal framework workstream in addition to a technical workstream? You can check out our latest notes here, and contribute by joining the group!
30 Apr '19: Chair Eve Maler presented an UMA 101 session at IIW 28 in Mountain View.
23 Apr '19: UMA was a big part of a two-hour HEART (Health Relationship Trust) webinar and workshop; you can view the YouTube recording here.
25 Mar '19: The contributed UMA2 specs were presented at the IETF 104 meeting, at the Monday OAuth WG session. You can see the presented slides and the video of the whole session.
22 Feb '19: Don't miss the latest updates to our Implementations page, which include a new implementation from IDENTOS.
