OIDCfed (GN4-2 JRA3 T3-1A) 2017-10-20 Meeting notes

?? @Charlie will send round the notes of the design meeting before

Wednesday next week.

 @Davide:ping Charlie about that

DONE → Meeting notes are on the wiki: https://wiki.geant.org/display/gn42jra3/T3.1A+OpenID+Connect+Federation

@Janusz, Hervé and Jule: will work on the use cases in a structured format.

@Hervé and Jule: better define the final purpose of the use cases description starting a discussion on the mailing list

DONE → discussion has been started (but we haven't arrived at any final conclusions)

@Alejandro: will ask to Henri and Janne about state of the art of the SHib OP and participation to Hackthon

OPEN -> discuss next week

@Davide: update the calendar to switch to 1pm Friday weekly call and send invites

DONE

@Everyone will review the use cases format:

https://docs.google.com/document/d/14klNJo6KETzY42AByTVeErI2vuBfkSiLMLa-reNd8rY/edit?usp=sharing

OPEN

@Maarten will update us on replacing Ioannis.

DONE

Jule: Use cases: is it only inspiration for pilot partners, or use cases that pilot partners should implement? This is important before we can work further on the use cases.

Davide: pilot for technology? Or pilot OIDCfederation?

Juha is not clear on this either

Three options:

-          Testing software itself

-          Testing use cases

-          Test Open ID Connect federation

We have to choose between these three options.

Hard to select a use case and try to apply open ID connect federation to it.

There is a working document right now for the pilot: https://docs.google.com/document/d/1VyhjH6D4QZmF4IihlQBUVY0joVx4z6-a-Cq9hmRT408/edit

Davide: There ar goals in this document, but they have to be clearer. What level are we talking about?

Davide: If we don’t have good use cases (real services where the OIDCfed can be piloted) what we can do is just letting the federations that will be part of the pilot test the software implementation and aim at a very different target. If we want to test actual use cases, the work done so far can only be used as inspiration. If we want to test OIDC protected service from a vendor, we should talk to the vendor to update their libraries, which is not going to happen within the timeframe of the pilot itself.

Conclusion: some more work needs to be done on the pilot. Juha will be in the lead on this, but can ask Davide, (Maarten), Hervé and Constantin about federation stuff.

Questions that need to be addressed:

Who are our clients in the end?

Which actors will be involved in each phase and what should they do?

Actors involved in the Pilot:

- Federation Operators (y)

- IDM/IdP Admins at campuses/research centers level (?)

- End Users (?)

Actions for the FedOps to participate to the Pilot:

• ?

NEW ITEM: Juha will work on the pilot document to make it more clear what the goals are.

NEW ITEM: Hervé, Davide, Constantin and Maarten to help out with the identity federation questions for the pilot.

We will continue this discussion in the mailing list to also answer the question of the use cases.