Minutes 24 May 2018 TC Meeting - UPDATED

[William Parducci <bill@parducci.net>]

Time: 4:30 PM EDT (-0400 GMT)
Tel: 1-712-775-7031

Minutes for 24 May 2018 TC Meeting

I. Roll Call & Minutes
Attendance
Voting Members
Hal Lockhart (Co-Chair)
Bill Parducci (Co-Chair)
Rich Levinson
Steven Legg

Members
David Brossard
Martin Smith

Guest
Michael Good, Axiomatics

Quorum: YES. 4 of 5 (80%) 

Approve Minutes 26 April 2018
APPROVED

II. Administrivia
 Next call 21 June 4:30 EDT

 Open Policy Agent (OPA)
  David:
   I mentioned on the list about the OPA coming on the scene. Would be we open to a 
   presentation by them? They are working on a concise language. It could be interesting
   as an input in considering XACML v4.
  Martin:
   I looked at this and it looks to be code-like in nature.
  Hal:
   I am going to want to check with Oasis on this. This may invoke some IPR steps before
   the TC can do this. ACTION ITEM

  Oauth (redux)
   David:
    I recently attended the EU Identity Conference and User Managed Access was an active
    topic with Oauth.
   Martin:
    I don't think they have a policy language.
   David:
    Correct. XACML could fill the gap.
   Rich:  few years ago I put together a demo on SourceForge as part of OpenAZ on how to
    integrate Oauth and XACML.

III. Issues
 Rest Profile
   Steven:
    Reviewed changes. I downgraded entry point functional is main point. Also updated 
    reference to XACML v3, JSON Profile and newer. I believe that this Profile is ready, 
    barring any typographic issues. I assume this will wait until the JSON Profile is 
    ready as well.
   Hal:
    Yes, that makes sense.

 JSON Profile
  Steven:
   Reviewed changes: I have added a glossary that defines all the terms needed to use in 
|  JSON to avoid any confusion with XML syntax. This made it easier to bring for richer 
   prose into the tables. The tables are not a complete reference to all of the members 
   of an object. I moved comments to the Type column, updated references. I moved all 
   choices between single and array object and replaced with array only. The StatusObject
   member, StatusDetail, was string and has been modified to an array of objects to be
   consistent with our move to arrays and make the references in the Profile consistent. 
   I also removed references to NULL and stated that empty arrays are allowed. I found a 
   small edit that I would to fix so I will be submitting an update.

meeting adjourned