[WG-UMA] Draft minutes for UMA telecon 2023-01-05
Alec L
UMA telecon 2023-01-05
Date and Time
Primary-week Thursdays 06:30am PT; Secondary-week Thursdays 10:00am PT
Screenshare and dial-in: https://zoom.us/j/99487814311?pwd=dTAvZi9uN0ZmeXJReWRrc1Zycm5KZz09
United States: +1 346 248 7799, Access Code: 994 8781 4311
See UMA calendar for additional details: https://kantara.atlassian.net/wiki/spaces/uma/pages/4857518/Calendar
Agenda
Approve minutes since UMA telecon 2022-06-30
2023 planning & discussion
Leadership elections
FAPI and UMA next steps. OAuth compatible UMA version
AOB
Attendees
NOTE: As of Sept 15, 2022, quorum is 3 of 5. (Peter, Sal, Alec, Eve, Steve)
Voting:
Alec
Steve
Non-voting participants:
Hanfei
Scott
Domenico
Regrets:
Quorum: No
Meeting Minutes
Approve previous meeting minutes
Approve minutes of UMA telecon 2022-08-11, UMA telecon 2022-08-25, UMA telecon 2022-09-08 , UMA telecon 2022-09-15 , UMA telecon 2022-09-22 , UMA telecon 2022-09-29 , UMA telecon 2022-10-06 , UMA telecon 2022-10-13 , UMA telecon 2022-10-20 , UMA telecon 2022-10-27 , UMA telecon 2022-11-03 , UMA telecon 2022-11-10 , UMA telecon 2022-11-24 , UMA telecon 2022-12-01 , UMA telecon 2022-12-08 , UMA telecon 2022-12-15
Deferred - no quorum
Topics
2023 planning & discussion
For identos, using UMA in healthcare (hospital and provincial). Looking for how to promote UMA within the US healthcare, how it fits within the sequoia/onc/carin/direct trust
Health: direct trust federated identity gateway aligned with UMA requirements/spec.
Healthcare + Finance, many consumers with data relationships. Desire to empower self-service vs staff managed sharing + access.
UMA + FAPI, still believes UMA works with FAPI, however, making UMA directly compatible with OAuth/OIDC makes this trivial/obvious.
Consumer in the driver's seat → bring your own app.
How do trust registry and BYOA concepts work together? eg UDAP requires clients to have attestation
What about Verifiable Credentials? starting to feel an inflection point
eIDAS, user-carried credentials able to be presented? New regulation may lead to FAPI/VC requirements
mDL, showed VC alignment for web presentation using the openid4vc. Not clear how UMA works with mDL
Can we get an update from UK Pensions Dashboard?
Tentative 2023 roadmap:
120 A financial use-case report (following the Julie healthcare template)
openbanking is to FHIR(data model) as FAPI is to SMARTonFHIR(authZ protocol profile)
123 Pensions Dasboard Report → use-case is well understood and live/going live soon. tight use-case
Let’s reach out to some of the involved people eg at Origo or Forgerock. Were there any gaps in UMA they had to work around?
127 Open Banking Report → requires more research, determine use case
Who would lead this/ needs this for UMA in open banking contexts? Should come after FAPI review?
130 IDPro knowledge base articles
140 Wikipedia article refresh