Kantara Initiative Identity Assurance WG Teleconference

Meeting Minutes approved by IAWG 22 August 2013


Date and Time


  1. Administration:
    1. Roll Call
    2. Agenda Confirmation
    3. Minutes approval: IAWG Meeting Minutes 2013-08-1
    4. Action Item Review
    5. Staff reports and updates
    6. LC reports and updates
    7. Call for Tweet-worthy items to feed (@KantaraNews or #kantara)
  2. Discussion
    1. Disposition of Comments for SP800-63-2 v IAF v3.0 mapping (continuted)
    2. IAF Tickets and Issues Review
      NOTE: All tickets now posted at Identity Assurance Framework - Working Drafts
      1. Myisha to present ARB feedback
  3. AOB
  4. Adjourn


Link to IAWG Roster

As of 1 July 2013, quorum is 5 of 9

Meeting was quorate, with 7 voting participants present.








Notes & Minutes


Minutes Approval

IAWG Meeting Minutes 2013-08-1

Motion to approve minutes of 2013/8/1: Rich Furr
Seconded: Bill Braithwaite
Discussion: None
Motion Passed 

Action Item Review

See running table below

Staff Updates

LC Updates
Participant updates


Disposition of Comments Continued
IAF Ticket Review

UPDATE: ARB comments on #527461


#770408 discussed on 1 August and 8 August 2013 calls.

Line:  1636 - 1640, 2149 - 2198

This is permitting only three protocols making IAF protocol dependent. 
Currently, it is listing tunneled password, zero knowledge-base password; SAML assertions. 


Discussion of ticket

(8 August 2013) Discussion:

Disposition:  Return for clarification | Add to IAF enhancements list


The text from last week's meeting is copied here for reference. Myisha to discuss ARB feedback on Ticket disposition decisions.

NOTE: All tickets now posted at Identity Assurance Framework - Working Drafts

Identity Assurance Framework - Working Drafts

IAF Ticket #527461 (13 June 2013)

IAF Ticket #328495 (July 13, 2013)

IAF Ticket #314131 (July 13 2013)

IAF Ticket #770408 (13 July 2013)

Discussion of AL2_CM_CTR#028 and AL2_CM_CTR#025 questions


New ticket 527461 created.

The process below does not clearly state if the ARB must vote to accept 
an application and list it as registered applicant or if the application 
can be accepted by the secretariat upon performance of review that the 
application is not a wast of time (so far out of scope or not aligned 
with mission).

I apologize for the line numbers but the below, I believe, references 
the section where the clarification is needed.

Could you please ensure this is entered as a change request for the AAS 

Thank you!

Quoting from AAS v3-0:
6.7 Specific Evaluation Steps 651
The Secretariat will validate the initial Application submission up to 
and including Part I clause 652 4.1, step 9. 653 Where the Application 
is for a Full Service Approval, the Secretariat will ensure that the 
overlay 654 of the collective criteria covered by the combination of 
the Applicant