Assurance

[Benn Oshrin <>]

Since there weren't any replies, here's a hypothetical... Keeping in 
mind we're talking LoA sufficient for retrieving your bookmarks, perhaps 
we can say something like "the subject must re-establish her or his 
identity in a manner consistent with the original credentialing".

So, for example, consider that a student enrolls, provides sufficient 
proof of identity to the Registrar, and that operation is leveraged to 
establish the student's netid. The student subsequently forgets their 
password, and cannot reset it via a single use token or reset questions. 
The student could return to the Registrar's office and, once the 
Registrar was satisfied with the identity of the student, update their 
records with a new Address of Record. Once the address migrated to the 
IdMS, a reset token could be issued.

Similarly, an employee could go to their HR representative, or a guest 
or affiliate could go to their sponsor. Where an institution allows 
self-signup for NetIDs without a corresponding SOR role record, the 
subject would presumably need to create a new NetID -- credentials 
without associated registration/role records and no reset paths cannot 
be recovered.

Thoughts?

-Benn-

On 1/17/13 4:58 PM, Ann West wrote:
> Thanks Benn.
>
>
> Good question. How do folks re-credential for LoA1 now?
>
> Best,
> Ann
>
>
> On 1/11/13 6:37 PM, "Benn Oshrin" 
> <>
> wrote:
>
> > Sort of related to my last message...
> >
> > The proposed v1.2 FICAM draft makes §4.2.4.3 part of Bronze.
> >
> > "After expiration of the current Credential, if none of these methods
> > are successful then the Subject must re-establish her or his identity
> > with the IdPO per Section 4.2.2 before the Credential may be renewed or
> > re-issued."
> >
> > However, almost none of §4.2.2 applies to Bronze, which has no
> > registration record requirements. What does this imply for a Subject
> > with an expired credential, a no longer valid Address of Record, and no
> > (or forgotten) pre-registered questions?
> >
> > Thanks,
> >
> > -Benn-