Assurance

[Steven Carmody <>]

On 7/29/16 12:00 PM, Tom Barton wrote:
> Hi Steven,
>
> Thanks for that feedback. Do you see further gaps in "trust level"
> between baseline and POP that are not called out already on the
> consultation page? And are there additional baseline expectations you
> think are needed to represent a "reasonable level for today's world"?

I was wondering, in particular, whether we'd expect to see a profile 
targeted at IDM Management Policy and Practices.

Jim Basney has already called out one such item ( "IdPs will provide 
authoritative and accurate attribute assertions to other Participants" - 
I read that to mean that the site de-provisions properly when someone 
leaves; it also means that the site maintains Affiliation values, etc as 
a person's role changes).

Another example might be "each account is controlled/owned by a single 
person, who is responsible for its use".

I expect all sites to behave consistent with those practices. I'm asking 
if AAC sees those as Baseline practices, or as items in a layered 
profile related to IDM prtactice ?

> Yes, the general idea is to add profiles on top of baseline. Work is
> well underway on one of those, Sirtfi. The REFEDS Assurance WG is
> working on another, motivated to address needs identified by a number of
> research communities. All who are interested are invited to join that
> new WG. After that ... we'll try to understand what is the next
> important target to shoot for.
>
> Thanks,
> Tom