MFA Interop Working Group

[Eric Goodman <>]

I’m sure you’re all waiting with bated breath for updates like this late on a Friday…

 

After the discussion on yesterday’s call I went back and made some significant to the Usage Guidance document in the SAML-specific (AuthnContext use) area. Mostly this was to make the discussion flow a little less awkwardly while still trying to cover both (a) how to decide which AuthnContexts to request for different use cases and (b) how knowing (or not) in advance that a given IdP supports the new profiles might affect how you processing the results (especially errors). Despite much wordsmithing I don’t think I changed anything significant from a “what we actually are advising” point of view.

 

I edited so much that I “accepted” all the edits rather than leave them in “suggestion” mode to make it easier to read. That probably makes it less obvious what the specific edits were, so you might want to give those SAML sections a little extra scrutiny as (if) you review the document.

--- Eric

 

 

From: [mailto:] On Behalf Of Nick Roy
Sent: Thursday, March 31, 2016 1:56 PM
To:
Subject: [MFA-Interop] Notes/AIs from this week.

 

Hello,

 

Here are the notes/AIs from today's call: https://docs.google.com/document/d/1adxlMCIqBIFEdrQ4J8sytV5zPqYIer7znaNp_Evqg0U/edit

 

Everyone on this list: Review usage guidance and note where you see things you think need to be moved into the profile (https://docs.google.com/document/d/1l2sGPcK-gB6q6BBkrQRRSUXhH5J59z2W7EHSd04IVyo/edit#)

Walter: Will propose profile text clarifying 'MFA in the context of the user's current session' to avoid for example, trusted devices

 

Best,

 

Nick