The UMA V1.0 specifications have been approved as Kantara Initiative Draft Recommendations. The UMA Core spec is at rev 12 and the OAuth Resource Set Registration spec is at rev 05. Stay tuned for ongoing standardization and interoperability news!
The purpose of the UMA Work Group (charter) is to develop specs that let an individual control the authorization of data sharing and service access made between online services on the individual's behalf, and to facilitate interoperable implementations of the specs. Read thespec, join the group, check out the implementations, test your interop, get involved!
February 25:The UMA V1.0 specifications have been approved as Kantara Initiative Draft Recommendations. The UMA Core spec is at rev 12 and the OAuth Resource Set Registration spec is at rev 05. Notable and breaking changes are catalogued on this page. Stay tuned for ongoing standardization and interoperability news!
January 13: Chair Eve Maler presented on UMA today to the IETF ACE group (Authentication and Authorization for Constrained Environments); here are her slides and here is the recording.
December 20: Check out the fledgling UMA Implementer's Guide. This will grow quickly, based on our work to whip the specs into "V1.0 candidate" shape. If you have content you'd like to recommend for it, subscribe to the UMA-dev list and suggest away!
December 16: The UMA WG is hard at work wrapping up new feature requests for UMA V1.0. Recent UMA Work Group decisions have settled on the specifications that constitute our candidate V1.0 suite: UMA CoreandOAuth Resource Set Registration. (UMA Claim Profiles has been obsoleted.) Expect to see the call for V1.0 public review soon!
November 3: Check out the current "State of UMA" in this new slide deck presented at the Kantara workshop at the Identity Relationship Management Summit in Dublin, Ireland.
October 21: A new slide deck on Consumerizing Industrial IoT Access Control: Using UMA to Add Privacy and Usability to Strong Security is now available on SlideShare.
August 20: Looking for a quick-reference way to understand UMA's relationship with the rest of the "Venn of authorization", including OAuth and OpenID Connect? See the Venn "infographic" slides (ppt, pdf).
May 14: UMA was one of the recipients of a European Identity Conference award today! Find the news on our Facebook page (and "like" us while you're at it).