Discuss documents A, B, C:

• Table of Contents
• Key points to mention

Decided to prioritise document C

Introduced June from RZG, who is liasing for Geant to consume results of our document

Document responsibility handed to Uros,

Finalise Intro: Marcus

Agreed from now on to use Vidyo room:

https://www.nikhef.nl/grid/video/?m=aarcjra1

Short review of the doc, and discussion about the future steps.

Discussion about the possible implementations of the step-up:

From the SP point of view, there are 3 use cases:

• First, if the SP requires having MFA (or step-up of other components), then all IdPs which users are accessing this service need to support and provide MFA, which may be difficult to achieve
• Second, the SP itself may implement MFA functionality (the actual implementation of this use case was not elaborated at this point)
• Third (most interesting at this point), there can be IdP-proxy that can provide step-up service (e.g. for MFA)

Possible description of the third use case:

• User authenticates with the SP and establishes a browser session. The SP then can redirect the user to the predefined IdP-proxy service, where the user can then go through the step-up procedure (e.g. perform MFA). After successful performance of the step-up procedure, the user is redirected back to the SP. SP then can grant access to the user.

Future work:

• Pinging Stefan for SafeShare chapter: Uros
• Review old comments and try to resolve them: Uros
• Create initial drawing of the third use case, on lucidchart: Uros
• For everyone: going through the doc, and fix current issues

There will be three documents:

1. Authentication-step-up:
   • Short, concise, to the point (e.g. 4 pages) 
   • Document here: https://docs.google.com/document/d/1lQqK9-_DTRwrqeFhiQywQ0iVZindFrK9-Ozx9eY0ols
   • Step up for SPs that are connected to a proxy
   • Based on TNC18 Abstract by Jule and Marcus
   • Capturing the discussion we had on AARC2-AHM-day3
   • This will be the new JRA1.2C document for the deliverable
2. AuthN-freshness-step-up:
   
   • Like above document, but focused on AuthN Freshness
   • Document here: https://docs.google.com/document/d/1BgwXppt09Mntfg6Z59BEK5rA0nVN2mZCgF3fHsy2eaw
3. General assurance elevation:
   • "Holistic" document
   • It's the "old" document that will evolve to the holistic one: https://docs.google.com/document/d/1R24xKC-cC7sLyb13Gr2jxKtlA83_qESrkCorT4PTb74
   • All definitions
   • General assurance elevation on components
   • ..."make it look like an IdP (from the SP perspective)"
   • Still keep it to the point.
4. Experiences of the pilot...

Received various comments from Mikael, Jens and Mischa

Will include step-up flows from a Geant doc of Christos (Second factor authentication component for the Life Science AAI)

Will have Session at TIIME to discuss final document

Marcus will circulate a close-to-final version on Wednesday

Received comments on close-to-final version

Discussed comments

Marcus will circulate a 'pretty-final' (=closer-to-final) version on Wednesday

The call was missing partners from

• EGI
• PSNC
  • Surfnet

Move sections 2 and 4 to appendix

Open consultation about the recommendations