Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Section
Column
width70%

This Work Group operates under the Kantara IPR Policy - Option Patent & Copyright: Reciprocal Royalty Free with Opt-Out to Reasonable And Non discriminatory (RAND) (HTML version). You can find any opt-outs on this page.

Home | Intro | Join | List | Archive (Mailman) | Archive (Google) | Calendar


Panel
borderColor#99cc00
bgColor#ffffff
borderWidth4pt
titleThe UMA V2.0 specifications are in have exited WG Last Call!

The UMA V2.0 specifications are at have exited their four-week"WG last call" ! Our 2016 roadmap work has borne fruitperiod, and the Work Group approved a key has published an initial set of drafts as of 9 March 201717 April 2017 reflecting comments made during that period: UMA Core V2.0 revision 2021 and OAuth 2.0 Resource Registration revision 0708. Here is a detailed swimlane diagram that dynamically tracks the drafts, and a high-level swimlane diagram that briefly summarizes the UMA2 flow. The UMA Implementer's Guide is also growing. Expect more draft spec work and other information, such as release notes, soon. If you're interested to contribute to the review, testing, and finalization of the Kantara Recommendation versions of these specifications over the coming few weeks and months, we welcome youit's not too late! Fill out the Group Participation Agreement form to get going. The WG last call period will end on April 11. Click the image above to view the UMA Movie, which premiered at the 23rd Internet Identity Workshop in October 2016.

Panel
borderColor#7f7f7f
borderWidth0



User-Managed Access (UMA) is an award-winning OAuth-based protocol designed to give an individual a unified control point for authorizing who and what can get access to their digital data, content, and services, no matter where all those things live. Read the specs, join the group, check out the implementations, follow us on Twitter, like us on Facebook, get involved!

See the UMA Roadmap for 2016 page to see the use cases and technical issues that the Work Group is currently focusing on.

The short link for this page is http://tinyurl.com/umawg.

 

News:

  • March 13April 17: The UMA V2.0 specifications are at have exited their four-week"WG last call" ! Our 2016 roadmap work has borne fruitperiod, and the Work Group approved a key has published an initial set of drafts as of 9 March 201717 April 2017 reflecting comments made during that period: UMA Core V2.0 revision 2021 and OAuth 2.0 Resource Registration revision 0708. Here is a detailed swimlane diagram that dynamically tracks the drafts, and a high-level swimlane diagram that briefly summarizes the UMA2 flow. The UMA Implementer's Guide  is also growing. Expect more draft spec work and other information, such as release notes, soon. If you're interested to contribute to the review, testing, and finalization of the Kantara Recommendation versions of these specifications over the coming few weeks and months, we welcome youit's not too late! Fill out the Group Participation Agreement form to get going. The WG last call period will end on April 11Click the image above to view the UMA Movie, which premiered at the 23rd Internet Identity Workshop in October 2016.
  • March 3: The UMA Legal subgroup is meeting again to look at important new deliverables. If you've got a legal specialty, or want to contribute to the connection between consent/permission/authorization/delegation and the regulatory data protection world, you're just the kind of person we're looking for.
  • November 4: The UMA Legal subgroup has a new sharpened-up charter today! Check out the Legal page for links to interim deliverables. Particularly if you're a "legal eagle", are familiar with GDPR, or have business use cases involving delegation or proxies/guardians, we'd love for you to join us and help out. (See the Join link on this page.)March 29: One of UMA's three trust elevation methods, claims gathering, was reported on January 27 to be affected by a session fixation attack. The WG has produced an extension specification to enable mitigation of the attack called UMA Claims-Gathering Extension for Enhanced Security, and a background document to further discuss the attack, the mitigation chosen, and other approaches considered and possible. Many thanks to the original reporters of the issue and the group for its quick action.
Column
Column
width5%
 
Column
width25%
Leadership
  • Chair: Eve Maler
  • Vice-Chair: Maciej Machulak
  • Full leadership team list
  • Read about Kantara leadership roles
Teleconference Info

...