This Work Group operates under the Kantara IPR Policy - Option Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non discriminatory (RAND) (HTML version). You can find any opt-outs on this page.
Home | FAQ | Protocol Spec | Trust Model Spec | Chat | Join | WG-UMA List | UMA-dev list → Join ← | List | Archive (Mailman) | Archive (Google) | Calendar
|title||UMA V0.9 enters public review; interop planned|
The three main UMA Version 0.9 specifications – UMA Core, OAuth Resource Set Registration, and UMA Claim Profiles – are out for a 45-day public review period ending September 6 at 17:00 Pacific time. This review is in preparation for advancement of these specs as Kantara Initiative Recommendations. If you have specification comments or IPR review comments, be sure to follow the commenting instructions. The UMA group will also be holding a virtual and in-person interop testing event during the week of IIW XIX (Oct 28-30). To find out more, subscribe to the UMA-dev list
We are undertaking some important new work on an UMA "policy manager" extension, and more. You can check it out by reading our Meetings and Minutes, and if you're interested to contribute, be sure to click our Join link above! ⬆︎
Here are the UMA Grant (PDF, HTML for deep linking) and UMA Federated Authorization Recommendations (PDF, HTML for deep linking). Don't miss the UMA2 masterclass delivered by two UMAnitarians at the Identiverse conference in Boston in June 2018 (slides and video). (The slides and video from the previous year's Authorization: Age of UMA session set in the Marvel Cinematic Universe was also a big hit!) The Release Notes review all final UMA1-to-UMA2 changes. See also the UMA Implementer's Guide, our list of known Implementations, and discussions of Case Studies. Finally, see the detailed UMA Grant sequence diagram and FedAuthz sequence diagram.
The purpose of the UMA Work Group (charter) is to develop specs that let an individual control the authorization of data sharing and service access made between online services on the individual's behalf, and to facilitate interoperable implementations of the specs. Read the spec
test your interop
User-Managed Access (UMA) is an award-winning OAuth-based protocol designed to give an individual a unified control point for authorizing who and what can get access to their digital data, content, and services, no matter where all those things live. Read the specs, join the group, check out the implementations,
Follow us on Twitter – our handle is @UMAWG. ( – spread the word.) Find us on Facebook too
follow us on Twitter, get involved!
Recent webinars:UMA and Personal Clouds on 19 June 2014 (slides, SlideShare, recording)UMA for the Enterprise on 20 March 2014 (slides, SlideShare, recording)August Looking for a quick-reference way to understand UMA's relationship with the rest of the "Venn of authorization", including OAuth and OpenID Connect? See the Venn "infographic" slides (ppt, pdf).August 17: Got a use case for UMA? Want help documenting a case study? See the new UMA case study worksheet PowerPoint slide deck, which can help you create a custom set of diagrams to describe your unique circumstances. Also see examples of other case studies on our dedicated Case Studies page.July 24: The three main UMA Version 0.9 specifications – UMA Core , OAuth Resource Set Registration , and UMA Claim Profiles – are out for a 45-day public review period ending September 6 at 17:00 Pacific time. This review is in preparation for advancement of these specs as Kantara Initiative Recommendations. If you have specification comments or IPR review comments, be sure to follow the commenting instructions.July 24: Check out the latest entry on our Case Studies page: an industrial IoT authorization case study submitted by Intel. In the new Internet of Things, refrigerated shipping containers are resource servers and ships are clients.July 24: The UMA group will be holding a virtual and in-person interop testing event during the week of IIW XIX (Oct 28-30). To find out more, subscribe to the UMA-dev list.May 14: UMA was one of the recipients of a European Identity Conference award today! Find the news on our Facebook page (and "like" us while you're at it).March 29: Did you know there's an open-source Apache server plugin that supports UMA? Check it out on our Implementations page. Thanks to Gluu and its partners for making this plugin happen!Check out the "assembly cut" of the UMA demo video here. Thanks to Dazza Greenwood for being our video producer!
- The UMA Work Group is pleased to accept a new profile contribution (to be provided immently) related to UK Pensions Dashboards as shown on-screen at its meeting today. Read all about it on our updated Third-Party Profiles and Extensions page.
- 20 Oct '20: You can get UMAnitarian George Fletcher's UMA 101 presentation from IIW right here.
- 15 Oct '20: We are undertaking some important new work on an UMA "policy manager" extension, and more. You can check it out by reading our Meetings and Minutes, and if you're interested to contribute, be sure to click our Join link above! ⬆︎
- 1 Oct '20: WG chair Eve Maler presented UMA to the Decentralized Identity Foundation Secure Data Storage WG. Here are her slides.
- 22 Nov '19: There's a new implementation up on the Implementations page: PatientShare from Lush Group. It's also an implementation of the HEART profiles. Read all about it and check it out!