Assurance

[Eric Goodman <>]

Hi Mary, Michael, 

Can you clarify whether the AndrewID being relied upon in this process is a 
physical ID (like a student picture ID) or a login credential? A brief search 
of the CMU website makes it sound like "Andrew ID" could mean either.

Fundamentally, I think my input would depend on what kind of identity 
proofing goes into how that AndrewID was delivered. If there's sufficient 
identity proofing behind delivery of an AndrewID, there's an argument that 
what Michael is doing is credential re-issuance and NOT remote user 
registration. It would seem to be much easier to argue that this process is a 
valid (without any Alternative Means) credential re-issuance process if 
vetting was done for the Andrew ID. 

--- Eric

> -----Original Message-----
> From: 
> 
>  
> [mailto:]
> On Behalf Of Dunker, Mary
> Sent: Friday, April 04, 2014 7:06 AM
> To: 
> 
> Subject: [Assurance] Remote Identity Proofing
> 
> Hello, Assurance colleagues,
> 
> I'm wondering if any progress has been made on remote identity proofing
> procedures that could be used not only for InCommon Silver, but also for
> students who will never visit the physical campus. Section 4.2.2.4.3 of the
> IAP contains requirements for Silver remote proofing, and Michael Gettes
> proposed a procedure at
> https://spaces.internet2.edu/display/InCAssurance/CMU+-
> +Michael+Gettes+Proposal .
> 
> Has anyone actually implemented one of these procedures or something 
> similar?
> If so, would you please share some details?
> 
> Thank you,
> Mary
> -----------------------------------------------------------------
> Mary Dunker
> Director, Secure Enterprise Technology Initiatives Virginia Tech Information
> Technology
> 1700 Pratt Drive
> Blacksburg, VA 24060
> 540-231-9327
> 
> --------------------------------------------------------------------
>