Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Section
Column
width70%

This Work Group operates under the Kantara IPR Policy - Option Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non discriminatory (RAND) (HTML version). You can find any opt-outs on this page.

Home | Intro | Join | List | Archive (Mailman) | Archive (Google) | Calendar


 Image Removed

The UMA V1.0.1 specifications are Kantara Recommendations! The UMA Core V1.0.1 Recommendation and the OAuth Resource Set Registration V1.0.1 Recommendation are now available (check out the Release Notes too). Many thanks to the Work Group, the Kantara staff, and the membership for their support
Panel
borderColor#99cc00
bgColor#ffffff
borderWidth4pt
titleUMA V1.0.1 specifications approved by the Kantara membership
UMA2 has an active business-legal framework workstream

Image Added

The premise of the Work Group's report A Proposed Licensing Model for User-Managed Access is that UMA enables the individual to centrally manage access and use rights with respect to personal digital assets by converting permission tokens into machine-readable licenses. The group is working on a companion document that outlines a larger business-legal framework for achieving a wide variety of rights delegation use cases involving UMA technology.

Here are the UMA Grant (PDF, HTML for deep linking) and UMA Federated Authorization Recommendations (PDF, HTML for deep linking). Don't miss the UMA2 masterclass delivered by two UMAnitarians at the Identiverse conference in Boston in June 2018 (slides and video). (The slides and video from the previous year's Authorization: Age of UMA session set in the Marvel Cinematic Universe was also a big hit!) The Release Notes review all final UMA1-to-UMA2 changes. See also the UMA Implementer's Guide, our list of known Implementations, and discussions of Case Studies. Finally, see the detailed UMA Grant sequence diagram and FedAuthz sequence diagram.

Panel
borderColor#7f7f7f
borderWidth0
Image Removed

Image Added

User-Managed Access (UMA) is an award-winning OAuth-based protocol designed to give

a web user

an individual a unified control point for authorizing who and what can get access to their

online personal

digital data, content, and services, no matter where all those things live

on the web

. Read the

spec

specs, join the group, check out the implementations, follow us on Twitter, like us on Facebook, get involved!

The UMA Roadmap for 2016 guided the use cases and technical issues that the Work Group focused on in its UMA2 effort. You can find other drivers in the Work Group's original compendium of Scenarios and Use Cases, its Case Studies page, and its User Stories page.

The short link for this page is http://tinyurl.com/umawg.

 December 13: An exciting new case study has been made available on our site: Users Managing Delegated Access to Online Government Services. Here you can download the final report resulting from a POC performed by the Government of New Zealand.


News:

  • January 25: Enabling user-managed access requires a "BLT sandwich" – not just technical solutions, but well-rounded business and legal solutions as well! A new set of UMA Legal auxiliary material is now available on this wiki, representing the work done by the WG and its ad hoc legal subgroup. Stay tuned for more news and deliverables.
  • January 17: As of December 23, the Kantara All-Member Ballot for the UMA V1.0.1 specifications passed with flying colors. The UMA Core V1.0.1 Recommendation and the OAuth Resource Set Registration V1.0.1 Recommendation are now available (check out the Release Notes too). Many thanks to the Work Group, the Kantara staff, and the membership for their support as we cleaned up various small bugs throughout the spring and summer and returned the specs to the community for review in the fall.
  • December 22: Apologies: We just discovered that this page was linking to V1.1 of the PDF version of the operative IPR policy for the WG, vs. V1.2. The only differences between the two policy versions are the date and title. (The HTML link was correct.) If you have an old version of the IPR policy in your files, note the the correct version should have the date "December 2009" and the title "Option Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non discriminatory (RAND)" on it.
    • 16 Jul '20: Make sure to register for the new Kantara UMA webinar taking place on July 21st at 1pm ET – it will be all about health info interop and user control, and will include a demonstration.
    • 22 Nov '19: There's a new implementation up on the Implementations page: PatientShare from Lush Group. It's also an implementation of the HEART profiles. Read all about it and check it out!
    Column
     
    Column
    width5%

    Widget Connector
    url
    Column
    width25%
    Leadership
    • Chair: Eve Maler
    • Vice-Chair: Maciej Machulak
    • Full leadership team list
    • Read about Kantara leadership roles
    Teleconference Info
    Section
    twitter
    settings/widgets/419665047808274433

     

    Column
    width5%
     

     

    ...