Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.



This Work Group operates under the Kantara IPR Policy - Option Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non discriminatory (RAND) (HTML version). You can find any opt-outs on this page.

Home | Intro | → Join ← | List | Archive (Mailman) | Archive (Google) | Calendar

 Image Removed

Wishing you a holiday season full of blessings, and may 2016 bring you context, control, choice, and respect! Thanks to UMAnitarian Domenico Catalano (@domcat) for this year's marvelous spiral-based holiday message
titleHappy Holidays from the UMA Work Group to all of you!
UMA extension efforts

Image Added

We are undertaking some important new work on an UMA "relationship manager" extension to fully enable a resource owner dashboard experience, and more. You can check it out by reading our Meetings and Minutes. To understand more about our work on business-legal considerations, including identity relationship management (IRM)-based delegation use cases, see our Legal hub page. If you're interested to contribute to any of this, be sure to click our Join link above! ⬆︎

Here are the UMA Grant (PDF, HTML for deep linking) and UMA Federated Authorization Recommendations (PDF, HTML for deep linking). Don't miss the UMA2 masterclass delivered by two UMAnitarians at the Identiverse conference in Boston in June 2018 (slides and video). (The slides and video from the previous year's Authorization: Age of UMA session set in the Marvel Cinematic Universe was also a big hit!) The Release Notes review all final UMA1-to-UMA2 changes. See also the UMA Implementer's Guide, our list of known Implementations, and discussions of Case Studies. Finally, see the detailed UMA Grant sequence diagram and FedAuthz sequence diagram.

Image Removed

Image Added

User-Managed Access (UMA) is an award-winning OAuth-based protocol designed to give

a web user

an individual a unified control point for authorizing who and what can get access to their

online personal

digital data, content, and services, no matter where all those things live

on the web

. Read the


specs, join the group, check out the implementations, follow us on Twitter,

like us on Facebook,

get involved!

The group is currently working on extensions to UMA V2.0.

The short link for this page is



  • December 7: The UMA V1.0.1 specifications are undergoing Kantara All-Member Ballot for final approval. If you are (or represent) a Kantara member, check your email, follow the survey link, and vote in favor of passage! The ballot closes on December 23.
  • November 23: If you haven't seen it yet, check out the draft HEART Profile of UMA 1.0. This work is taking place in the Health Relationship Trust WG at the OpenID Foundation. "This specification profiles the User Managed Access protocol to increase baseline security, provide greater interoperability, and structure deployments in a manner specifically applicable to (but not limited to) the healthcare domain."
  • November 18: Much goodness is happening lately! UMAnitarian Adrian Gropper is launching an exciting new open-source effort called HIE of One ("HIE" meaning Health Information Exchange). It will combine elements of UMA, Consent Receipts, and CommonAccord as appropriate. Adrian will be introducing it at the MIT FutureCommerce hackathon being hosted by UMAnitarian Dazza Greenwood.
  • November 18: The Leadership Council has certified the V1.0.1 specifications as Draft Recommendations so that they can proceed to a Kantara All-Member Ballot.
  • November 6: The UMA specifications have undergone a "patch release" process, and have been approved by the Work Group as Draft Recommendations as of 5 Nov 2015. Keep an eye on the spec links (UMA Core, OAuth Resource Set Registration) to find the updated Draft Recommendations. Also check out the new UMA Release Notes.
  • August 7: A new subgroup of our WG, the legal subgroup, has launched in earnest to accelerate UMA adoption and reduce inhibitors on a business level. Get a sense of its work from these initial notes.
  • July 27: The UMA Developer Resources WG wiki is live! This WG is a companion to our WG that will be developing FOSS client implementation toolkits. Consider signing up to contribute to the UMA Dev WG today! Read the press release.
  • July 14: UMA made an appearance on the IAPP website today.
  • July 6: There's a new talk available on UMA from late May that may be of interest: Digital Consent: Taking UMA from Concept to Reality.
  • June 25: Did you know that UMA group vice-chair was named one of 2015’s Innovators Under 35? We're proud to have him on our leadership team!
  • June 8: Our charter revision from 2013 was belatedly posted to the official charter page.
  • May 28: Leadership team elections were held, and Eve Maler, Maciej Machulak, Thomas Hardjono, and Domenico Catalano were re-elected to their leadership positions.
  • May 21: The recording from May 16's UMA V1.0 webinar is now available on YouTube (slides, video)!
  • April 4: The UMA V1.0 specifications have been approved as Kantara Initiative Recommendations! Thanks to Kantara and to all UMAnitarians for your efforts to this point! The final UMA Core V1.0 specification (Kantara Recommendation, IETF I-D rev 13) and OAuth Resource Set Registration V1.0 specification (Kantara Recommendation, IETF I-D rev 06) are available. Check out the growing UMA Implementer's Guide. Work continues on the UMA Binding Obligations specification
    • 6 Sep '21: Congratulations to UMA WG members from Origo on their role in the UK Pensions Dashboard Programme! See this page in the Kantara wiki for more information on using UMA for PDP purposes.
    • 10 Jun '21: Congratulations to the new leadership team members! Alec Laws (of Identos) is the Chair and Steve Venema (of ForgeRock) is the Vice-Chair. The WG extends its thanks to former Chair Eve Maler for her previous service as chair. Information about the entire leadership team is here.
    • 20 Apr '21: You can get the latest and greatest UMA 101 presentation delivered by UMAnitarians Eve and George at IIW here.
    • 3 Dec '20: The UMA Work Group is pleased to accept a new profile contribution (to be provided immently) related to UK Pensions Dashboards as shown on-screen at its meeting today. Read all about it on our updated Third-Party Profiles and Extensions page.
    • 15 Oct '20: We are undertaking some important new work on an UMA "policy manager" extension, and more. You can check it out by reading our Meetings and Minutes, and if you're interested to contribute, be sure to click our Join link above! ⬆︎
    • 1 Oct '20: WG chair Eve Maler presented UMA, including analyses and comparisons to some other technologies, to the Decentralized Identity Foundation Secure Data Storage WG. Here are her slides.

    • Chair: Eve MalerAlec Laws
    • Vice-Chair: Maciej MachulakSteve Venema
    • Full leadership team list
    • Read about Kantara leadership roles
    Teleconference Info
  • Specific dial in details
  • Skype: +99051000000481
  • US Dial-In
  • Conference ID: 178-2540
  • Section