Meeting the InCommon Assurance profile criteria using Active Directory

["Michael W. Brogan" <>]

As agreed on the call, I’ve made table updates for the following:

 

4.2.3.4 #2 (added full disk encryption as a compensating control)

4.2.3.5 #2 (added information about LDAP signing and compatibility issues)

4.2.3.6 #1b (added text about DC replication)

 

On the last item there is a tbd pending research into protection of passwords during DC replication. Someone on the call took that research as an action item.

 

--Michael

 

From: [mailto:] On Behalf Of Ann West
Sent: Friday, March 22, 2013 6:54 AM
To:
Subject: [AD-Assurance] Call Today Noon ET

 

Hi All,

 

As arranged last week, our next AD-Assurance Call is today at Noon ET.

+1-734-615-7474 PREFERRED

+1-866-411-0013

0195240#

 

Agenda

--------

https://spaces.internet2.edu/display/InCAssurance/AD+Alternative+Means+-+2013

• Notes look okay?
• Action items

(Old) Ann will work with Debbie Bucci (NIH) to set up calls with Federal Agencies that have certified IdPs.

Michael will update scope statement and summary table in the wiki. 

All to prepare for gap analysis discussion. Refer to the Cookbook (linked to our project wiki page) and summary matrix. 

• Review Scoping

• Summary of IAP elements risks by AD Product 
• Next Call

Hope you can join us,

Ann