Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.



This Work Group operates under the Kantara IPR Policy - Option Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non discriminatory (RAND) (HTML version). You can find any opt-outs on this page.

Home | Intro | Join | List | Archive (Mailman) | Archive (Google) | Calendar

Image Removed

The Work Group is pleased to announce that it has published the UMA Version 2.0 Draft Recommendations, approved for their Public Comment period: UMA 2.0 Grant for OAuth 2.0 Authorization (UMA Grant rev 05) and Federated Authorization for UMA 2.0 (FedAuthz rev 05). To comment, please email your comments to with the subject "UMAWG COMMENT SUBMISSION".

Resources to understand more about UMA are available and growing. For example, especially if you're familiar with UMA V1, check out this detailed swimlane to get the broad strokes of what has changed. We're fleshing out the Release Notes, updating
titleThe UMA Version 2.0 Draft Recommendations are available for Public Comment!
UMA2 has an active business-legal framework workstream

Image Added

The premise of the Work Group's report A Proposed Licensing Model for User-Managed Access is that UMA enables the individual to centrally manage access and use rights with respect to personal digital assets by converting permission tokens into machine-readable licenses. The group is working on a companion document that outlines a larger business-legal framework for achieving a wide variety of rights delegation use cases involving UMA technology.

Here are the UMA Grant (PDF, HTML for deep linking) and UMA Federated Authorization Recommendations (PDF, HTML for deep linking). Don't miss the UMA2 masterclass delivered by two UMAnitarians at the Identiverse conference in Boston in June 2018 (slides and video). (The slides and video from the previous year's Authorization: Age of UMA session set in the Marvel Cinematic Universe was also a big hit!) The Release Notes review all final UMA1-to-UMA2 changes. See also the UMA Implementer's Guide, and attending to similar tasks around the site. If you're interested to help, we invite you to join the group! Fill out the Group Participation Agreement form to get going.Click the image above to view the UMA Movie, which premiered at the 23rd Internet Identity Workshop in October 2016. If you're attending the Cloud Identity Summit, don't miss the UMA 2.0 talk on June 22 by editors Justin and Eveour list of known Implementations, and discussions of Case Studies. Finally, see the detailed UMA Grant sequence diagram and FedAuthz sequence diagram.

Image Removed

Image Added

User-Managed Access (UMA) is an award-winning OAuth-based protocol designed to give an individual a unified control point for authorizing who and what can get access to their digital data, content, and services, no matter where all those things live. Read the specs, join the group, check out the implementations, follow us on Twitter, like us on Facebook, get involved!

See the
page to see

 guided the use cases and technical issues that the Work Group


focused on in its

UMA V2.0 effort

UMA2 effort. You can find other drivers in the Work Group's original compendium of Scenarios and Use Cases, its Case Studies page, and its User Stories page.

The short link for this page is

  or have business use cases involving delegation or proxies/guardians, we'd love for you to join us and help out. (See the Join link on this page.)


  • May 25: The Work Group is pleased to announce that it has published the UMA Version 2.0 Draft Recommendations, approved for their Public Comment period: UMA 2.0 Grant for OAuth 2.0 Authorization (UMA Grant rev 05) and Federated Authorization for UMA 2.0 (FedAuthz rev 05). To comment, please email your comments to with the subject "UMAWG COMMENT SUBMISSION".
  • March 3: The UMA Legal subgroup is meeting again to look at important new deliverables. If you've got a legal specialty, or want to contribute to the connection between consent/permission/authorization/delegation and the regulatory data protection world, you're just the kind of person we're looking for.
  • November 4: The UMA Legal subgroup has a new sharpened-up charter today! Check out the Legal page for links to interim deliverables. Particularly if you're a "legal eagle", are familiar with GDPR,
    • 16 Jul '20: Make sure to register for the new Kantara UMA webinar taking place on July 21st at 1pm ET – it will be all about health info interop and user control, and will include a demonstration.
    • 22 Nov '19: There's a new implementation up on the Implementations page: PatientShare from Lush Group. It's also an implementation of the HEART profiles. Read all about it and check it out!

    Widget Connector
    • Chair: Eve Maler
    • Vice-Chair: Maciej Machulak
    • Full leadership team list
    • Read about Kantara leadership roles
    Teleconference Info