OIDCfed (GN4-2 JRA3 T3-1A) 2018-06-22 Meeting notes

Proposal OpenID foundation edu WG;

• • Whatfor?

    • edu/ R&S Policy expressions in OIDC

    • SAML->OIDC edu metadata translation

  • Davide prepared first parts:
    https://github.com/daserzw/oidc-edu-wg

    • Related documentation
      OpenID Foundation Process
      http://openid.net/wordpress-content/uploads/2010/01/OpenID_Process_Document_December_2009_Final_Approved.pdf
      OpenID Foundation IPR
      http://openid.net/ipr/OpenID_IPR_Policy_(Final_Clean_20071221).pdf

  • Who is in:
    --- Maarten
    --- Steffen / Wolfgang (TBC)
    --- Jule
    --- Davide

  • Specs to be produced by the OID edu WG:
    • how to extend OIDC entity metadata
    • edu claims (no duplication!)
    • general OIDC specification for edu (much like IGOV OIDC spec):
      • OIDC federation spec is the way to communicate and enforce trust
      • OIDC messaging (MUST encrypt instead of 'SHOULD')
      • etc.

Policy Frameworks: How to support them?

• Outcome of discussion @TNC:
  • we need sth. more general to extend metadata as entity categories/attributes in SAML to *express* the policies -- to be done
  • no real discussion about the implementation of the 'trust'-part; might stay the same as in SAML (via the federations)
• Davide proposes to have some kind of certification program for educational claims
• Steffen: It might simply be an edu_claims claim in the JWT which itself is a container for all 'our' categories/attributes/claims?

Discussion: Where to put the Research/Scholarship "eduGAIN 2.0" work for OIDC?

• agreement: NOT inside OID foundation WG
• edu claims in the JWT: definitely INSIDE OID foundation WG
• try to stay close to REFEDS (also needed for WG application)