OIDCfed (GN4-2 JRA3 T3-1A) 2017-12-22 Meeting notes

We talk about the questions that Roland has put up:

• What do we need, what are the tools supposed to do ?
• What do we have. What's the experience using those ?
• The missing tools, who is going to design and implement them ?

What do we need?

• a way you can send your metadata statement and get it signed → web service
  • deliver nested metadata statements
  • no UI for the signing service: https reqistration ↔ response
  • user registration
• way to renew or revoke keys
  • lifetime of signed metadata statement: 1 hour
• client registration service

Term of reference: we have to at least be the same as SAML

What do we have?

• cli FO scripts (create_jwks, make_req...)