Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
https://twitter
Section
Column
width70%

This Work Group operates under the Kantara IPR Policy - Option Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non discriminatory (RAND) (HTML version). You can find any opt-outs on this page.

Home | Intro | Join | List | Archive (Mailman) | Archive (Google) | Calendar


Panel
borderColor#99cc00
bgColor#ffffff
borderWidth4pt
titleUMA2 Draft Recommendations heading to certification for ballothas an active business-legal framework workstream

The UMA 2.0 Grant for OAuth 2.0 Authorization(UMA Grant rev 09) and Federated Authorization for UMA 2.0(FedAuthz rev 09) specs are now headed off to certification for Kantara All-Member Ballot and we expect true finalization shortly! You can read the final Disposition of Comments document to see how the last few comments were handled.Many resources to understand more about UMA are available. Don't miss the slides and video from Authorization: Age of UMA, the Introducing UMA 2.0 session delivered by two UMA coauthors at the Chicago Cloud Identity Summit. The Release Notes are up to date with all spec changes through the first Public Comment periodpremise of the Work Group's report A Proposed Licensing Model for User-Managed Access is that UMA enables the individual to centrally manage access and use rights with respect to personal digital assets by converting permission tokens into machine-readable licenses. The group is working on a companion document that outlines a larger business-legal framework for achieving a wide variety of rights delegation use cases involving UMA technology.

Here are the UMA Grant (PDF, HTML for deep linking) and UMA Federated Authorization Recommendations (PDF, HTML for deep linking). Don't miss the UMA2 masterclass delivered by two UMAnitarians at the Identiverse conference in Boston in June 2018 (slides and video). (The slides and video from the previous year's Authorization: Age of UMA session set in the Marvel Cinematic Universe was also a big hit!) The Release Notes review all final UMA1-to-UMA2 changes. See also the UMA Implementer's Guide, which continues to grow. Also see the , our list of known Implementations, and discussions of Case Studies. Finally, see the detailed UMA Grant sequence diagram and FedAuthz sequence diagram. If you're interested to help, we invite you to join the group! Fill out the Group Participation Agreement form to get going.

Panel
borderColor#7f7f7f
borderWidth0

Image RemovedImage Added

User-Managed Access (UMA) is an award-winning OAuth-based protocol designed to give an individual a unified control point for authorizing who and what can get access to their digital data, content, and services, no matter where all those things live. Read the specs, join the group, check out the implementations, follow us on Twitter, like us on Facebook, get involved!

The UMA Roadmap for 2016 page guided  guided the use cases and technical issues that the Work Group focused on in its UMA V2.0 UMA2 effort. You can find other drivers in the Work Group's original compendium of Scenarios and Use Cases, its Case Studies page, and its User Stories page.

The short link for this page is http://tinyurl.com/umawg.


News:

    November 16: TheUMA 2.0 Grant for OAuth 2.0 Authorization (UMA Grant rev 09) and Federated Authorization for UMA 2.0 (FedAuthz rev 09) specs are now headed off to certification for Kantara All-Member Ballot and we expect true finalization shortly! You can read the final Disposition of Comments document to see how the last few comments were handled. Don't miss our Case Studies and Implementations pages for new additions.
  • October 3: At the recent Consumer Identity World conference in Seattle, Work Group chair Eve Maler presented on GDPR, PSD2, CIAM, and the Role of User-Managed Access (2.0) at the Kantara pre-conference workshop. Check out the slides and video. Thanks to KuppingerCole for their support through this event!
  • September 28: The UMA 2.0 Grant for OAuth 2.0 Authorization (UMA Grant rev 08) and Federated Authorization for UMA 2.0 (FedAuthz rev 08) specs are undergoing a second Public Comment/IPR Review period, from September 28 through November 12. Please see the announcement for details on reporting comments or Necessary Claims.
  • June 26: Don't miss this great new article on UMA 2.0 by spec coauthor Justin Richer22 Nov '19: There's a new implementation up on the Implementations page: PatientShare from Lush Group. It's also an implementation of the HEART profiles. Read all about it and check it out!
  • 3 Oct '19: Chair Eve Maler and vice-chair Maciej Machulak have been re-elected to their positions for an annual term. See the Leadership Team page for a full list.
  • 1 Oct '19: Did you know that the UMA Work Group has an active business-legal framework workstream in addition to a technical workstream? You can check out our latest notes here, and contribute by joining the group!
  • 30 Apr '19: Chair Eve Maler presented an UMA 101 session at IIW 28 in Mountain View.
  • 23 Apr '19: UMA was a big part of a two-hour HEART (Health Relationship Trust) webinar and workshop; you can view the YouTube recording here.
  • 25 Mar '19: The contributed UMA2 specs were presented at the IETF 104 meeting, at the Monday OAuth WG session. You can see the presented slides and the video of the whole session.
  • 22 Feb '19: Don't miss the latest updates to our Implementations page, which include a new implementation from IDENTOS.
Column
 
Column
width5%

Widget Connector
url
Column
width25%
Leadership
  • Chair: Eve Maler
  • Vice-Chair: Maciej Machulak
  • Full leadership team list
  • Read about Kantara leadership roles
Teleconference Info
  • http

    https://

    join.me/findthomas (voice and screenshare)
Section
settings/widgets/419665047808274433
Column
width5%