Overview & Charter

• Working Group Summary and Charter

Presentations

• 2017-11-21 – Alan Crosswell, "Columbia University - API Standards & Practices"
• 2017-10-24 – Gregory Haverkamp, "OIDC and OAuth2 at LBNL" (PDF slides)

Work Products

Note: unless otherwise noted, this working group is focused on organizations in the Higher Education community.

1. Refine scope
   1. Review recommendations from the previous WG
   2. Define scope for this WG
   3. Consider campus-specific vs. federation-specific
   4. Include native mobile application authentication using SAML and OIDC/OAuth2
2. Share information
   1. Facilitate information sharing among deployers and interested parties
   2. Coordinate with international community
   3. Examples: email lists, wiki pages, conference calls, trainings, workshops, and regular webinars
3. Develop best practices
   1. Document OIDC and OAuth2 use cases
   2. Include what is and is not being used
   3. Include software architectures in use
   4. Document lessons learned
   5. Develop recommended practices for deployment, configuration, and use
4. Guide standardization
   1. Identify where increased standardization would benefit organizationn
   2. e.g., Map SAML Attributes to OIDC Claims
   3. e.g. map eduPerson schema to OIDC Claims
   4. e.g. develop profile similar to healthcare, iGov, financial
   5. Facilitate related standardization
   1. Work within existing standardization efforts
   2. Or create new efforts
5. Support multilateral federation
   1. Identify use cases that require multilateral federation support
   2. Identify issues R&E federations must address to provide federated OIDC/OAuth2
   3. Coordinate with GEANT OpenID Connect Federation task; includes Roland Hedberg's efforts
   4. Coordinate with REFEDS OIDCre working group
   5. Present to TAC and Internet2 T&I

See Also

• Trust and Identity Working Groups List
• Guidelines for Trust and Identity Working Group Chairs and Flywheels
• OIDC Survey Working Group, chaired by Albert Wu
• TIER API WG - OAuth / OIDC Study Group
• 2017-07-19 – Blog on new TAC Working Groups (by Mark Scheible)