From nobody Mon Jul 6 08:50:29 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F9581B2E36 for ; Mon, 6 Jul 2015 08:50:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FjaxuDUpjARy for ; Mon, 6 Jul 2015 08:50:26 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 83E591B2E34 for ; Mon, 6 Jul 2015 08:50:26 -0700 (PDT) Received: from aserv0021.oracle.com (aserv0021.oracle.com [141.146.126.233]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t66FoPhK021202 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Mon, 6 Jul 2015 15:50:25 GMT Received: from userv0122.oracle.com (userv0122.oracle.com [156.151.31.75]) by aserv0021.oracle.com (8.13.8/8.13.8) with ESMTP id t66FoP2v015492 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Mon, 6 Jul 2015 15:50:25 GMT Received: from abhmp0019.oracle.com (abhmp0019.oracle.com [141.146.116.25]) by userv0122.oracle.com (8.13.8/8.13.8) with ESMTP id t66FoOZ3004069; Mon, 6 Jul 2015 15:50:24 GMT Received: from [192.168.1.9] (/174.7.250.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Mon, 06 Jul 2015 08:50:24 -0700 From: Phil Hunt Content-Type: multipart/alternative; boundary="Apple-Mail=_06B5C191-34D3-47E0-8F57-FB783442A62F" Date: Mon, 6 Jul 2015 08:50:23 -0700 Message-Id: <3B7B7208-E3B3-4E69-B43B-273D74188A48@oracle.com> To: RFC System , SCIM WG Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\)) X-Mailer: Apple Mail (2.2102) X-Source-IP: aserv0021.oracle.com [141.146.126.233] Archived-At: Cc: Gregg Wilson Subject: [scim] Correction: draft-ietf-scim-api-19 X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jul 2015 15:50:28 -0000 --Apple-Mail=_06B5C191-34D3-47E0-8F57-FB783442A62F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 There are a couple of locations in the SCIM-API examples where the older = response attribute =E2=80=9Ccode=E2=80=9D was used and should be made = consistent with the normative text. Per the text in 3.12 and in the = Bulk status 3.7, all examples should simply have a =E2=80=9Cstatus=E2=80=9D= attribute and an http status value. On Page 46 s/=E2=80=9Ccode=E2=80=9D:=E2=80=9D404=E2=80=9D/=E2=80=9Cstatus=E2=80=9D:= =E2=80=9D404=E2=80=9D On Page 53 The example:=20 > HTTP/1.1 200 OK > Content-Type: application/json >=20 > { > "schemas": = ["urn:ietf:params:scim:api:messages:2.0:BulkResponse"], > "Operations": [ > { > "location": > = "https://example.com/v2/Users/92b725cd-9465-4e7d-8c16-01f8e146b87a", > "method": "POST", > "bulkId": "qwerty", > "version": "W\/\"4weymrEsh5O6cAEK\"", > "status": { > "code": "201" > } > }, > { > "location": > = "https://example.com/v2/Groups/e9e30dba-f08f-4109-8486-d5c6a331660a", > "method": "POST", > "bulkId": "ytrewq", > "version": "W\/\"lha5bbazU3fNvfe5\"", > "status": { > "code": "201" > } > } > ] > } Should be: > HTTP/1.1 200 OK > Content-Type: application/json >=20 > { > "schemas": = ["urn:ietf:params:scim:api:messages:2.0:BulkResponse"], > "Operations": [ > { > "location": > = "https://example.com/v2/Users/92b725cd-9465-4e7d-8c16-01f8e146b87a", > "method": "POST", > "bulkId": "qwerty", > "version": "W\/\"4weymrEsh5O6cAEK\"", > "status=E2=80=9D: "201" > }, > { > "location": > = "https://example.com/v2/Groups/e9e30dba-f08f-4109-8486-d5c6a331660a", > "method": "POST", > "bulkId": "ytrewq", > "version": "W\/\"lha5bbazU3fNvfe5\"", > "status": "201" > } > ] > } Phil @independentid www.independentid.com phil.hunt@oracle.com --Apple-Mail=_06B5C191-34D3-47E0-8F57-FB783442A62F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
There are a couple of locations in the = SCIM-API examples where the older response attribute =E2=80=9Ccode=E2=80=9D= was used and should be made consistent with the normative text. =  Per the text in 3.12 and in the Bulk status 3.7, all examples = should simply have a =E2=80=9Cstatus=E2=80=9D attribute and an http = status value.

On Page 46
  = s/=E2=80=9Ccode=E2=80=9D:=E2=80=9D404=E2=80=9D/=E2=80=9Cstatus=E2=80=9D:=E2= =80=9D404=E2=80=9D

On Page 53

The example: 
HTTP/1.1 200 OK
   Content-Type: application/json

   {
     "schemas": ["urn:ietf:params:scim:api:messages:2.0:BulkResponse"],
     "Operations": [
       {
         "location":
   "https://example.com/v2/Users/92b725cd-9465-4e7d-8c16-01f8e146b8=
7a",
         "method": "POST",
         "bulkId": "qwerty",
         "version": "W\/\"4weymrEsh5O6cAEK\"",
         "status": {
           "code": "201"
         }
       },
       {
         "location":
   "https://example.com/v2/Groups/e9e30dba-f08f-4109-8486-d5c6a3316=
60a",
         "method": "POST",
         "bulkId": "ytrewq",
         "version": "W\/\"lha5bbazU3fNvfe5\"",
         "status": {
           "code": "201"
         }
       }
     ]
   }

Should be:

HTTP/1.1 200 OK
   Content-Type: application/json

   {
     "schemas": ["urn:ietf:params:scim:api:messages:2.0:BulkResponse"],
     "Operations": [
       {
         "location":
   "https://example.com/v2/Users/92b725cd-9465-4e7d-8c16-01f8e146b8=
7a",
         "method": "POST",
         "bulkId": "qwerty",
         "version": "W\/\"4weymrEsh5O6cAEK\"",
         "status=E2=80=9D: "201"
       },
       {
         "location":
   "https://example.com/v2/Groups/e9e30dba-f08f-4109-8486-d5c6a3316=
60a",
         "method": "POST",
         "bulkId": "ytrewq",
         "version": "W\/\"lha5bbazU3fNvfe5\"",
         "status": "201"
       }
     ]
   }



= --Apple-Mail=_06B5C191-34D3-47E0-8F57-FB783442A62F-- From nobody Wed Jul 8 12:00:22 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B33811A870F for ; Wed, 8 Jul 2015 12:00:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PX5vDGFEWRqX for ; Wed, 8 Jul 2015 12:00:20 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A1EE1A86E3 for ; Wed, 8 Jul 2015 12:00:17 -0700 (PDT) Received: from userv0022.oracle.com (userv0022.oracle.com [156.151.31.74]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t68J0H5K015840 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Wed, 8 Jul 2015 19:00:17 GMT Received: from userv0122.oracle.com (userv0122.oracle.com [156.151.31.75]) by userv0022.oracle.com (8.13.8/8.13.8) with ESMTP id t68J0GUh010269 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Wed, 8 Jul 2015 19:00:17 GMT Received: from abhmp0008.oracle.com (abhmp0008.oracle.com [141.146.116.14]) by userv0122.oracle.com (8.13.8/8.13.8) with ESMTP id t68J0GWL005016 for ; Wed, 8 Jul 2015 19:00:16 GMT Received: from [10.0.1.3] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 08 Jul 2015 12:00:16 -0700 From: Phil Hunt Content-Type: multipart/alternative; boundary="Apple-Mail=_ABC47E98-C371-4F7B-A555-46BB709E968F" Message-Id: <61640298-3435-4206-AFE9-EAC94581F02C@oracle.com> Date: Wed, 8 Jul 2015 12:00:15 -0700 To: SCIM WG Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\)) X-Mailer: Apple Mail (2.2102) X-Source-IP: userv0022.oracle.com [156.151.31.74] Archived-At: Subject: [scim] Credential Management - time to discuss? X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2015 19:00:21 -0000 --Apple-Mail=_ABC47E98-C371-4F7B-A555-46BB709E968F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii At the last IETF meeting we discussed briefly the idea of password = policy and management. The conversation branched out into the wider topic of credential = management. I think this is a really good idea. Frankly, password = management is hopefully soon a dead topic. :-) In advance of the next meeting maybe it would be good to get some = requirements, use cases together at least informally? For example, in addition to simply registering a public key for a User = (or a client application), are there workflow issues with binding a key = to a User (or an application or device)? Do we want to also define = common policy for items like algorithms, key rotation / expiry, etc? I think its worth looking into OIDC and some of the various credential = work they have started defining in the OAuth world. It may also be = worth looking at service provider stateful requirements for FIDO = credentials. Are there any? Finally, given that there are credentials for more than just Users, we = may need to first define some core schema for devices, applications, = etc. Phil @independentid www.independentid.com phil.hunt@oracle.com --Apple-Mail=_ABC47E98-C371-4F7B-A555-46BB709E968F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii At the last IETF meeting we discussed briefly the idea of = password policy and management.

The conversation branched out into the wider topic of = credential management. I think this is a really good idea. Frankly, = password management is hopefully soon a dead topic.  :-)

In advance of the next = meeting maybe it would be good to get some requirements, use cases = together at least informally?

For example, in addition to simply = registering a public key for a User (or a client application), are there = workflow issues with binding a key to a User (or an application or = device)?  Do we want to also define common policy for items like = algorithms, key rotation / expiry, etc?

I think its worth looking into OIDC and = some of the various credential work they have started defining in the = OAuth world.  It may also be worth looking at service provider = stateful requirements for FIDO credentials.  Are there = any?

Finally, = given that there are credentials for more than just Users, we may need = to first define some core schema for devices, applications, = etc.


= --Apple-Mail=_ABC47E98-C371-4F7B-A555-46BB709E968F-- From nobody Wed Jul 8 12:06:42 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4CC61A1A7B for ; Wed, 8 Jul 2015 12:06:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Waukhbl5vEMT for ; Wed, 8 Jul 2015 12:06:38 -0700 (PDT) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0118.outbound.protection.outlook.com [65.55.169.118]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 491031A1A79 for ; Wed, 8 Jul 2015 12:06:38 -0700 (PDT) Received: from BN3PR0301MB1234.namprd03.prod.outlook.com (10.161.207.22) by BN3PR0301MB1234.namprd03.prod.outlook.com (10.161.207.22) with Microsoft SMTP Server (TLS) id 15.1.213.14; Wed, 8 Jul 2015 19:06:36 +0000 Received: from BN3PR0301MB1234.namprd03.prod.outlook.com ([10.161.207.22]) by BN3PR0301MB1234.namprd03.prod.outlook.com ([10.161.207.22]) with mapi id 15.01.0213.000; Wed, 8 Jul 2015 19:06:36 +0000 From: Anthony Nadalin To: Phil Hunt , SCIM WG Thread-Topic: [scim] Credential Management - time to discuss? Thread-Index: AQHQubB3bGSVRwFvakS8dgGPXGY1653R7giQ Date: Wed, 8 Jul 2015 19:06:36 +0000 Message-ID: References: <61640298-3435-4206-AFE9-EAC94581F02C@oracle.com> In-Reply-To: <61640298-3435-4206-AFE9-EAC94581F02C@oracle.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: oracle.com; dkim=none (message not signed) header.d=none; x-originating-ip: [167.220.23.65] x-microsoft-exchange-diagnostics: 1; BN3PR0301MB1234; 5:2o2rFByi7gqwb8nT+39phwO8jX3qasM8JUaLhidW8HFFniX3+9EbioO420M5CKZ7v7osi0hNGfGsUzXw+J2aXnHCjGYDDuQQvuFkzu1DeFwRI6LlfNOTFuOFAuEUondQVoXmQ6B/EkRbv71Q65Vpew==; 24:QTKM3YmcAiUrHF6knFkN4EMZ/BgJux9If016HfyFwqHtOIsmUi/Tf5rPTY+LgFRF+pGavy3g2czNwNKgA3i1uhqMTEEbBVOOQyn1aEblJz0=; 20:K+v9UkjOxjPnwfsfX23nHOOmTtjpRDAbNMqH6iXdQRMAspuZDYvTWzJVa1YjVSOPhjz4A03RvHqXpjrh614XNQ== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN3PR0301MB1234; bn3pr0301mb1234: X-MS-Exchange-Organization-RulesExecuted x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401001)(5005006)(3002001); SRVR:BN3PR0301MB1234; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0301MB1234; x-forefront-prvs: 0631F0BC3D x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(46102003)(19617315012)(551544002)(62966003)(40100003)(19609705001)(2900100001)(189998001)(16601075003)(66066001)(77156002)(15975445007)(33656002)(92566002)(19625215002)(76176999)(54356999)(50986999)(77096005)(76576001)(122556002)(5002640100001)(87936001)(19300405004)(86612001)(106116001)(5001960100002)(2656002)(107886002)(19580405001)(16236675004)(74316001)(5003600100002)(5001770100001)(19580395003)(102836002)(86362001)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0301MB1234; H:BN3PR0301MB1234.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; Content-Type: multipart/alternative; boundary="_000_BN3PR0301MB123480BB7D3C644F1A31040EA6910BN3PR0301MB1234_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2015 19:06:36.4481 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0301MB1234 Archived-At: Subject: Re: [scim] Credential Management - time to discuss? X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2015 19:06:41 -0000 --_000_BN3PR0301MB123480BB7D3C644F1A31040EA6910BN3PR0301MB1234_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable In a lot of cases the client will hold the key and key generation ability, = so basically the server would only be involved in registering/de-registerin= g the key, it may also have to find the key to do the verification. I don't= consider keys used for authentication to be credentials. From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Phil Hunt Sent: Wednesday, July 8, 2015 12:00 PM To: SCIM WG Subject: [scim] Credential Management - time to discuss? At the last IETF meeting we discussed briefly the idea of password policy a= nd management. The conversation branched out into the wider topic of credential management= . I think this is a really good idea. Frankly, password management is hopef= ully soon a dead topic. :-) In advance of the next meeting maybe it would be good to get some requireme= nts, use cases together at least informally? For example, in addition to simply registering a public key for a User (or = a client application), are there workflow issues with binding a key to a Us= er (or an application or device)? Do we want to also define common policy = for items like algorithms, key rotation / expiry, etc? I think its worth looking into OIDC and some of the various credential work= they have started defining in the OAuth world. It may also be worth looki= ng at service provider stateful requirements for FIDO credentials. Are the= re any? Finally, given that there are credentials for more than just Users, we may = need to first define some core schema for devices, applications, etc. Phil @independentid www.independentid.com phil.hunt@oracle.com --_000_BN3PR0301MB123480BB7D3C644F1A31040EA6910BN3PR0301MB1234_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

In a lot of cases the client will hol= d the key and key generation ability, so basically the server would only be= involved in registering/de-registering the key, it may also have to find the key to do the verification. I don’t con= sider keys used for authentication to be credentials.

&nbs= p;

From: scim [mailto:scim-bounces@ietf= .org] On Behalf Of Phil Hunt
Sent: Wednesday, July 8, 2015 12:00 PM
To: SCIM WG <scim@ietf.org>
Subject: [scim] Credential Management - time to discuss?<= /span>

 

At the last IETF meeting we discussed briefly the id= ea of password policy and management.

 

The conversation branched out into the wider topic o= f credential management. I think this is a really good idea. Frankly, passw= ord management is hopefully soon a dead topic.  :-)

 

In advance of the next meeting maybe it would be goo= d to get some requirements, use cases together at least informally?

 

For example, in addition to simply registering a pub= lic key for a User (or a client application), are there workflow issues wit= h binding a key to a User (or an application or device)?  Do we want t= o also define common policy for items like algorithms, key rotation / expiry, etc?

 

I think its worth looking into OIDC and some of the = various credential work they have started defining in the OAuth world. &nbs= p;It may also be worth looking at service provider stateful requirements fo= r FIDO credentials.  Are there any?

 

Finally, given that there are credentials for more t= han just Users, we may need to first define some core schema for devices, a= pplications, etc.

 

 

--_000_BN3PR0301MB123480BB7D3C644F1A31040EA6910BN3PR0301MB1234_-- From nobody Wed Jul 8 12:50:40 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 239AE1A8737 for ; Wed, 8 Jul 2015 12:50:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id donVtukSx_E9 for ; Wed, 8 Jul 2015 12:50:36 -0700 (PDT) Received: from mail-la0-f54.google.com (mail-la0-f54.google.com [209.85.215.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C34E31A873D for ; Wed, 8 Jul 2015 12:50:34 -0700 (PDT) Received: by lagc2 with SMTP id c2so229596879lag.3 for ; Wed, 08 Jul 2015 12:50:33 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=klo5FU1eGW1XscTP7pekVnAIABlPtM3GoagdTdFj0bE=; b=gVol4+5P77/2DcRiPSF1+gHr6Q/We7ADLAb76aMYAvSa1FEkxCbZs9nsk/8sEC0fpJ Y+CLU8utS0i7ld3fHZVTL0I94Cs5szfeNP31BuelMPh5i0fkTxMtNXSoGCir9KL7+AFN FfpOCG96YN560FstSdS6ZRSS3XVFFix5M+tJOewWtyKSJ2wkwIb8ey6QN0n5LTiSusg7 9CAMfQZLrNbsjQr+Fb9QJRKbQKgaU+6oRRcGTbRGPPhCTJwN4+OLBs5QFberv7/muhxX NOBUHB0j+gtOLNvaNb+gLRD5lLBgpyGKiune2dXVqdLhdsk1hjdQev8mSLIFgARitHDY BPvA== X-Gm-Message-State: ALoCoQnmsg9UIEFx+AHpMjJuWhlFtxJeV0LnZwfE2BBTZ3iMR92GZzpYJ3CvtL5kZ6lXFqO4MNQB MIME-Version: 1.0 X-Received: by 10.112.137.232 with SMTP id ql8mr11165445lbb.121.1436385033189; Wed, 08 Jul 2015 12:50:33 -0700 (PDT) Received: by 10.152.87.112 with HTTP; Wed, 8 Jul 2015 12:50:33 -0700 (PDT) In-Reply-To: References: <61640298-3435-4206-AFE9-EAC94581F02C@oracle.com> Date: Wed, 8 Jul 2015 21:50:33 +0200 Message-ID: From: Samuel Erdtman To: Anthony Nadalin Content-Type: multipart/alternative; boundary=089e01176f0baa18dc051a6273b2 Archived-At: Cc: SCIM WG , Phil Hunt Subject: Re: [scim] Credential Management - time to discuss? X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jul 2015 19:50:39 -0000 --089e01176f0baa18dc051a6273b2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi At neXus one of the key credentials is cards (Visual, RFID, magstripe, NFC, Smart cards, etc), here we see a big need for provisioning the card information out to different PACS (Physical Access Systems), managing representation, and also in the automated ordering process. For issuance of the cards there is always a lot of workflows in action and then there is the actual representation of the card, a normal card often needs a lot of details since it can be used to interact with multiple systems. e.g. we need to at least store the following information about a card * Issued date * Expire data (to send renewal reminders etc) * Image of the card (for easy administration) * Type of card (permanent, temporary, contractor etc.) * Certificates stored on the card (including key archiving reference) * RFID number (pushed to PACS:es) * Card PIN (pushed to PACS:es) * Card PUK or admin key (for unblocking smart cards) There is probably more that I did not think about now, however with this said I think this this would be a good initiative. We also soft token management of different kinds where it could be useful e.g as mention lifespan of credentials. Best Regards //Samuel Erdtman On Wed, Jul 8, 2015 at 9:06 PM, Anthony Nadalin wrote: > In a lot of cases the client will hold the key and key generation > ability, so basically the server would only be involved in > registering/de-registering the key, it may also have to find the key to d= o > the verification. I don=E2=80=99t consider keys used for authentication t= o be > credentials. > > > > *From:* scim [mailto:scim-bounces@ietf.org] *On Behalf Of *Phil Hunt > *Sent:* Wednesday, July 8, 2015 12:00 PM > *To:* SCIM WG > *Subject:* [scim] Credential Management - time to discuss? > > > > At the last IETF meeting we discussed briefly the idea of password policy > and management. > > > > The conversation branched out into the wider topic of credential > management. I think this is a really good idea. Frankly, password > management is hopefully soon a dead topic. :-) > > > > In advance of the next meeting maybe it would be good to get some > requirements, use cases together at least informally? > > > > For example, in addition to simply registering a public key for a User (o= r > a client application), are there workflow issues with binding a key to a > User (or an application or device)? Do we want to also define common > policy for items like algorithms, key rotation / expiry, etc? > > > > I think its worth looking into OIDC and some of the various credential > work they have started defining in the OAuth world. It may also be worth > looking at service provider stateful requirements for FIDO credentials. > Are there any? > > > > Finally, given that there are credentials for more than just Users, we ma= y > need to first define some core schema for devices, applications, etc. > > > > Phil > > > > @independentid > > www.independentid.com > > phil.hunt@oracle.com > > > > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim > > --089e01176f0baa18dc051a6273b2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi

At neXus one of the key credentials = is cards (Visual, RFID, magstripe, NFC, Smart cards, etc), here we see a bi= g need for provisioning the card information out to different PACS (Physica= l Access Systems), managing representation, =C2=A0and also in the automated= ordering process.
For issuance of the cards there is always a lo= t of workflows in action and then there is the actual representation of the= card, a normal card often needs a lot of details since it can be used to i= nteract with multiple systems. e.g. we need to at least store the following= information about a card
* Issued date
* Expire data (= to send renewal reminders etc)
* Image of the card (for easy admi= nistration)
* Type of card (permanent, temporary, contractor etc.= )
* Certificates stored on the card (including key archiving refe= rence)
* RFID number (pushed to PACS:es)
* Card PIN (pu= shed to PACS:es)
* Card PUK or admin key (for unblocking smart ca= rds)

There is probably more that I did not think a= bout now, however with this said I think this this would be a good initiati= ve.

We also soft token management of different kin= ds where it could be useful e.g as mention lifespan of credentials.

Best Regards
//Samuel Erdtman



On Wed, Jul 8, 2015 at 9:06 PM, Anthony Nadalin &l= t;tonynad@micros= oft.com> wrote:

In a lot of cases the client will hol= d the key and key generation ability, so basically the server would only be= involved in registering/de-registering the key, it may also have to find the key to do the verification. I don=E2=80=99t c= onsider keys used for authentication to be credentials.

=C2=A0

From: scim [mailto:scim-bounces@ietf.org] On Behalf Of Phil Hunt
Sent: Wednesday, July 8, 2015 12:00 PM
To: SCIM WG <s= cim@ietf.org>
Subject: [scim] Credential Management - time to discuss?

=C2=A0

At the last IETF meeting we discussed briefly the id= ea of password policy and management.

=C2=A0

The conversation branched out into the wider topic o= f credential management. I think this is a really good idea. Frankly, passw= ord management is hopefully soon a dead topic. =C2=A0:-)

=C2=A0

In advance of the next meeting maybe it would be goo= d to get some requirements, use cases together at least informally?<= u>

=C2=A0

For example, in addition to simply registering a pub= lic key for a User (or a client application), are there workflow issues wit= h binding a key to a User (or an application or device)?=C2=A0 Do we want t= o also define common policy for items like algorithms, key rotation / expiry, etc?

=C2=A0

I think its worth looking into OIDC and some of the = various credential work they have started defining in the OAuth world.=C2= =A0 It may also be worth looking at service provider stateful requirements = for FIDO credentials.=C2=A0 Are there any?

=C2=A0

Finally, given that there are credentials for more t= han just Users, we may need to first define some core schema for devices, a= pplications, etc.

=C2=A0

Phil

=C2=A0

@independentid

phil.hunt@oracle.com

=C2=A0


_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim


--089e01176f0baa18dc051a6273b2-- From nobody Tue Jul 14 04:28:31 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4ABE1AC39F for ; Tue, 14 Jul 2015 04:28:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.521 X-Spam-Level: X-Spam-Status: No, score=0.521 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t0son1sgI4Xy for ; Tue, 14 Jul 2015 04:28:29 -0700 (PDT) Received: from mail-wg0-x22c.google.com (mail-wg0-x22c.google.com [IPv6:2a00:1450:400c:c00::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 309931AC39E for ; Tue, 14 Jul 2015 04:28:29 -0700 (PDT) Received: by wgjx7 with SMTP id x7so6254960wgj.2 for ; Tue, 14 Jul 2015 04:28:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wso2.com; s=google; h=mime-version:date:message-id:subject:from:to:content-type; bh=FLLi5gLvmNFtXBubVw8B00PgCN+Qk6QXGW04mlQqWh0=; b=PeBDnswbTG6y0dJ7Y4Y57PwRfpa2Ox9ChOHiK8TFDuqq6vWqYcQr1+VYK2G1UP6kR6 3ecV+3vwoRabjPgGVtTJkwfFP28xCyBWT4GD0YpdDe1KGFmH3QbD3MDl4F77EnitIc/M n3ohoVtTuhQtyizUIfQkO33Tfxel3y0kNzggU= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to :content-type; bh=FLLi5gLvmNFtXBubVw8B00PgCN+Qk6QXGW04mlQqWh0=; b=QlQiZatfUnKmAp32To4MwoPPrQwRv1ZGIE/5KW5hg3NW1yUE5Z40on13AgC5ivJga0 kttBcFfRzX4TS8tBS+11pdblz35uKSPisIJ5+W3LySZfC2xurlDVhGtt091t74KMrMOK fHPm7ZPTMpWLj3HXCK43XXc08zPQNcEGepwf7xJDxYDLDrx86lr59OVrsuQvLl3SAmdu ESVIeVYrftpUBqwtAPLgRsPVDSUOR8xuqDTI2B6zXI8uI43Hkm2SCEKNmhuvC730pe44 f2rUukgedld5WLNUuElqGcgpNZkL2gs/KBSVdfJH7N3UmmPImunw2xLuo1dzwIBTUAqb X8nw== X-Gm-Message-State: ALoCoQmZKcd/VCRJipYZ51Food7qGGNQYeCFPCmDJ9eIIyVoNe8msPSYmCoOnVdBPXGOS6Ho+09v MIME-Version: 1.0 X-Received: by 10.180.20.12 with SMTP id j12mr32325467wie.4.1436873307883; Tue, 14 Jul 2015 04:28:27 -0700 (PDT) Received: by 10.27.130.201 with HTTP; Tue, 14 Jul 2015 04:28:27 -0700 (PDT) Date: Tue, 14 Jul 2015 16:58:27 +0530 Message-ID: From: Chamila Wijayarathna To: scim@ietf.org Content-Type: multipart/alternative; boundary=bcaec53d5b511a9e3e051ad4234c Archived-At: Subject: [scim] Clarrifying about SCIM filtering operation when filter value includes * X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Jul 2015 11:28:31 -0000 --bcaec53d5b511a9e3e051ad4234c Content-Type: text/plain; charset=UTF-8 Hi all, I'm sending following request to a SCIM provider. localhost:9443/wso2/scim/Users?filter=userName+Eq+%22a*a%22 As result should I get only a user with 'a*a' user name or should I get list of all users who has userNames match the regex 'a*a'? Thank You! -- *Chamila Dilshan Wijayarathna,* Software Engineer Mobile:(+94)788193620 WSO2 Inc., http://wso2.com/ --bcaec53d5b511a9e3e051ad4234c Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi all,

I'm sending foll= owing request to a SCIM provider.

localhost:9443/wso2/scim/Users?filter=3DuserName+Eq+%22a*a%22<= br>

As result should I get only a user with 'a*a' user name or sho= uld I get list of all users who has userNames match the regex 'a*a'= ?

Thank You!


--
<= div class=3D"gmail_signature">
Chamila Dilshan Wija= yarathna,
Software Engineer
Mobile:(+94)788193620
WSO2 Inc.,=C2=A0http://wso2= .com/
--bcaec53d5b511a9e3e051ad4234c-- From nobody Tue Jul 14 07:09:23 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ECFF21ACD7B for ; Tue, 14 Jul 2015 07:09:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O8v-WCZGRT4B for ; Tue, 14 Jul 2015 07:09:19 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0769.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::769]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CAA2F1ACD68 for ; Tue, 14 Jul 2015 07:09:18 -0700 (PDT) Received: from BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) by BN1PR04MB392.namprd04.prod.outlook.com (10.141.60.151) with Microsoft SMTP Server (TLS) id 15.1.213.14; Tue, 14 Jul 2015 14:09:14 +0000 Received: from BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.228]) by BN1PR04MB392.namprd04.prod.outlook.com ([169.254.10.228]) with mapi id 15.01.0213.000; Tue, 14 Jul 2015 14:09:14 +0000 From: Kelly Grizzle To: Chamila Wijayarathna , "scim@ietf.org" Thread-Topic: [scim] Clarrifying about SCIM filtering operation when filter value includes * Thread-Index: AQHQvig464yDlzv0zkqkdRZt+yQ+KJ3bALBw Date: Tue, 14 Jul 2015 14:09:13 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-vipre-scanned: 4D6BDE6300A40C4D6BDFB0 authentication-results: wso2.com; dkim=none (message not signed) header.d=none; x-originating-ip: [70.114.158.171] x-microsoft-exchange-diagnostics: 1; BN1PR04MB392; 5:k5lk3OUd5jOkvHQyQZ3Q9kuFj0k83aHsESWYTNPgZsJG+BZm1N32PpQgFfYI8O85OAWBz/qwtEg2OEBbxkEAlE/BPqBMjU7HqGTPYQaRUYjA4vXcjSeGsfEd91T4sGfMpnS8KDCg9zp3IUDe8LV09A==; 24:MVmDc+vdvQbsu0RmDnwu3iqgQBQ5KcnvPO6y1YYelfe/SxICSDQ9qGDnjGEaIDtQVz1JVyDThcNhYjghbgBH3YSDpzM9YWIjNpnCTdj9Q1s=; 20:6RByd95e2AvB4d3obn7zWt0KDJ0qNn74dd2/NrmrzNywQOWjjYNbDgpBjcT+K3qqMPHvt3cYzgFCYG5JvJkhTQ== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN1PR04MB392; bn1pr04mb392: X-MS-Exchange-Organization-RulesExecuted x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(5005006)(3002001); SRVR:BN1PR04MB392; BCL:0; PCL:0; RULEID:; SRVR:BN1PR04MB392; x-forefront-prvs: 0637FCE711 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(53754006)(19300405004)(2501003)(5002640100001)(54356999)(33656002)(102836002)(99286002)(15395725005)(19580405001)(92566002)(62966003)(50986999)(76576001)(87936001)(19617315012)(106116001)(19625215002)(40100003)(15975445007)(77156002)(76176999)(2950100001)(122556002)(19580395003)(2656002)(16236675004)(189998001)(74316001)(2900100001)(5003600100002)(19609705001)(5001770100001)(107886002)(86362001)(66066001)(5001960100002)(46102003); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR04MB392; H:BN1PR04MB392.namprd04.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; Content-Type: multipart/alternative; boundary="_000_BN1PR04MB392CB35427BE02D21FC48B5E29B0BN1PR04MB392namprd_" MIME-Version: 1.0 X-OriginatorOrg: sailpoint.com X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Jul 2015 14:09:13.9763 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9c848b2a-49ba-4c39-9749-118d06717a84 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR04MB392 Archived-At: Subject: Re: [scim] Clarrifying about SCIM filtering operation when filter value includes * X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Jul 2015 14:09:22 -0000 --_000_BN1PR04MB392CB35427BE02D21FC48B5E29B0BN1PR04MB392namprd_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlIFNDSU0gZmlsdGVyIGxhbmd1YWdlIGRvZXMgbm90IHN1cHBvcnQgd2lsZGNhcmRzLCBzbyB0 aGlzIHdvdWxkIG9ubHkgbWF0Y2ggYSB1c2VyIHdpdGggdGhlIG5hbWUg4oCcYSph4oCdLiAgSWYg eW91IHdhbnRlZCB0byBwZXJmb3JtIHRoaXMgeW91IHdvdWxkIG5lZWQgdG8gdXNlIGZpbHRlcj11 c2VyTmFtZSBzdyBhIGFuZCB1c2VyTmFtZSBldyBhLg0KDQoNCkZyb206IHNjaW0gW21haWx0bzpz Y2ltLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBDaGFtaWxhIFdpamF5YXJhdGhuYQ0K U2VudDogVHVlc2RheSwgSnVseSAxNCwgMjAxNSA2OjI4IEFNDQpUbzogc2NpbUBpZXRmLm9yZw0K U3ViamVjdDogW3NjaW1dIENsYXJyaWZ5aW5nIGFib3V0IFNDSU0gZmlsdGVyaW5nIG9wZXJhdGlv biB3aGVuIGZpbHRlciB2YWx1ZSBpbmNsdWRlcyAqDQoNCkhpIGFsbCwNCg0KSSdtIHNlbmRpbmcg Zm9sbG93aW5nIHJlcXVlc3QgdG8gYSBTQ0lNIHByb3ZpZGVyLg0KDQpsb2NhbGhvc3Q6OTQ0My93 c28yL3NjaW0vVXNlcnM/ZmlsdGVyPXVzZXJOYW1lK0VxKyUyMmEqYSUyMg0KDQpBcyByZXN1bHQg c2hvdWxkIEkgZ2V0IG9ubHkgYSB1c2VyIHdpdGggJ2EqYScgdXNlciBuYW1lIG9yIHNob3VsZCBJ IGdldCBsaXN0IG9mIGFsbCB1c2VycyB3aG8gaGFzIHVzZXJOYW1lcyBtYXRjaCB0aGUgcmVnZXgg J2EqYSc/DQoNClRoYW5rIFlvdSENCg0KDQotLQ0KQ2hhbWlsYSBEaWxzaGFuIFdpamF5YXJhdGhu YSwNClNvZnR3YXJlIEVuZ2luZWVyDQpNb2JpbGU6KCs5NCk3ODgxOTM2MjANCldTTzIgSW5jLiwg aHR0cDovL3dzbzIuY29tLw0K --_000_BN1PR04MB392CB35427BE02D21FC48B5E29B0BN1PR04MB392namprd_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2 IDQgMyA1IDQgNCAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBs aS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9t Oi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJv bWFuIiwic2VyaWYiO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnNwYW4u RW1haWxTdHlsZTE3DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQouTXNvQ2hwRGVm YXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsInNhbnMtc2VyaWYiO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBp bjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0K CXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1s Pg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1s PjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpl eHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVs YXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGlu az0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPlRoZSBTQ0lNIGZpbHRlciBsYW5ndWFnZSBkb2VzIG5vdCBzdXBwb3J0IHdpbGRjYXJkcywg c28gdGhpcyB3b3VsZCBvbmx5IG1hdGNoIGEgdXNlciB3aXRoIHRoZSBuYW1lIOKAnGEqYeKAnS4m bmJzcDsgSWYgeW91IHdhbnRlZCB0byBwZXJmb3JtIHRoaXMgeW91IHdvdWxkIG5lZWQgdG8gdXNl DQogZmlsdGVyPXVzZXJOYW1lIHN3IGEgYW5kIHVzZXJOYW1lIGV3IGEuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7Ij4gc2NpbSBbbWFpbHRvOnNjaW0tYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFs ZiBPZiA8L2I+Q2hhbWlsYSBXaWpheWFyYXRobmE8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2RheSwg SnVseSAxNCwgMjAxNSA2OjI4IEFNPGJyPg0KPGI+VG86PC9iPiBzY2ltQGlldGYub3JnPGJyPg0K PGI+U3ViamVjdDo8L2I+IFtzY2ltXSBDbGFycmlmeWluZyBhYm91dCBTQ0lNIGZpbHRlcmluZyBv cGVyYXRpb24gd2hlbiBmaWx0ZXIgdmFsdWUgaW5jbHVkZXMgKjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBhbGwsPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkknbSBzZW5kaW5nIGZvbGxvd2luZyByZXF1 ZXN0IHRvIGEgU0NJTSBwcm92aWRlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1m YW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMzMz MzMzIj5sb2NhbGhvc3Q6OTQ0My93c28yL3NjaW0vVXNlcnM/ZmlsdGVyPXVzZXJOYW1lJiM0MztF cSYjNDM7JTIyYSphJTIyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZh bWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMzMzMz MzMiPkFzIHJlc3VsdCBzaG91bGQgSSBnZXQgb25seSBhIHVzZXIgd2l0aCAnYSphJyB1c2VyIG5h bWUgb3Igc2hvdWxkIEkgZ2V0IGxpc3Qgb2YgYWxsIHVzZXJzIHdobyBoYXMgdXNlck5hbWVzIG1h dGNoIHRoZSByZWdleCAnYSphJz88L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Zv bnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzMzMzMzMyI+VGhhbmsgWW91ITwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PGJyIGNsZWFyPSJhbGwiPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPi0tIDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+Q2hhbWlsYSBEaWxzaGFuIFdpamF5YXJhdGhuYSw8L2I+ PGJyPg0KU29mdHdhcmUgRW5naW5lZXI8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS41cHQ7Y29sb3I6Ymxh Y2siPk1vYmlsZTo8L3NwYW4+KCYjNDM7OTQpNzg4MTkzNjIwPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku NXB0O2NvbG9yOmJsYWNrIj5XU08yIEluYy4sPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 OS41cHQ7Y29sb3I6Izg4ODg4OCI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Imh0dHA6Ly93c28yLmNv bS8iIHRhcmdldD0iX2JsYW5rIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuNXB0O2NvbG9yOiMx MTU1Q0MiPmh0dHA6Ly93c28yLmNvbS88L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BN1PR04MB392CB35427BE02D21FC48B5E29B0BN1PR04MB392namprd_-- From nobody Wed Jul 15 20:57:42 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4397B1B2FCD for ; Wed, 15 Jul 2015 20:57:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wSpRH7DkRBdh for ; Wed, 15 Jul 2015 20:57:39 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1AD11B2FB9 for ; Wed, 15 Jul 2015 20:57:39 -0700 (PDT) Received: from aserv0022.oracle.com (aserv0022.oracle.com [141.146.126.234]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t6G3vbQ9002666 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Thu, 16 Jul 2015 03:57:39 GMT Received: from userv0122.oracle.com (userv0122.oracle.com [156.151.31.75]) by aserv0022.oracle.com (8.13.8/8.13.8) with ESMTP id t6G3vbMC015403 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Thu, 16 Jul 2015 03:57:37 GMT Received: from abhmp0014.oracle.com (abhmp0014.oracle.com [141.146.116.20]) by userv0122.oracle.com (8.13.8/8.13.8) with ESMTP id t6G3vaDV028058 for ; Thu, 16 Jul 2015 03:57:36 GMT Received: from [10.0.1.3] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Wed, 15 Jul 2015 20:57:36 -0700 From: Phil Hunt Content-Type: multipart/alternative; boundary="Apple-Mail=_6E509F83-F343-49FF-993C-D914CA3AB213" Message-Id: <2445B3FA-3FC6-4590-9E47-7940704B7293@oracle.com> Date: Wed, 15 Jul 2015 20:57:33 -0700 To: SCIM WG Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2102\)) X-Mailer: Apple Mail (2.2102) X-Source-IP: aserv0022.oracle.com [141.146.126.234] Archived-At: Subject: [scim] Notification events X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jul 2015 03:57:41 -0000 --Apple-Mail=_6E509F83-F343-49FF-993C-D914CA3AB213 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii For those that will be at the IETF meeting next week, it occurs to me we = should follow up on notification events. One of the items that was interesting from CIS was the event = notifications that they were discussing like account take over, password = reset, etc. Might be interesting to see if there is overlap and if the = current SCIM Notify proposal should have some of the events described by = Andy Nash. We do have a BarBof planned for credentials. Would anyone like to meet = up to discuss this some time next week? Phil @independentid www.independentid.com phil.hunt@oracle.com --Apple-Mail=_6E509F83-F343-49FF-993C-D914CA3AB213 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii For those that will be at the IETF meeting next week, it = occurs to me we should follow up on notification events.

One of the items that = was interesting from CIS was the event notifications that they were = discussing like account take over, password reset, etc.  Might be = interesting to see if there is overlap and if the current SCIM Notify = proposal should have some of the events described by Andy = Nash.

We do = have a BarBof planned for credentials. Would anyone like to meet up to = discuss this some time next week?


= --Apple-Mail=_6E509F83-F343-49FF-993C-D914CA3AB213-- From nobody Thu Jul 16 00:56:39 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D87EC1B3728 for ; Thu, 16 Jul 2015 00:56:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r7DfAeXoLWsE for ; Thu, 16 Jul 2015 00:56:36 -0700 (PDT) Received: from mail-la0-f48.google.com (mail-la0-f48.google.com [209.85.215.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 63E3A1B3727 for ; Thu, 16 Jul 2015 00:56:36 -0700 (PDT) Received: by lahh5 with SMTP id h5so38641829lah.2 for ; Thu, 16 Jul 2015 00:56:35 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=rKlfEiEum6ksDKyMvupd5c0z8lGuA0aRvwCI47d4ruM=; b=jvntL5iVZ+zQSEvBZ8mpHMQ0a3LOyJm1gao+A5Cohz2dku1cPLtlVA/JyHQOQrkGTf 4gD0QNEnjANHbJrnpE8iXgA3yqT7RXOClitiaaYPQeHyocdlYKo5shRRkhYbiC01qNor pHDLG3A+RQpxkYOZhcAim8SpemDpb5IKRJ1UkZqcNuiM6rEP2WDcham+m9oUaJnxX+8a qTe0c+iQ5VyQK04Utzeln3B1n7jSpr1NPHJiv7p7NvcGM+x2hcp57km6gYbIRdYuW6Av iCimVJo0pUBA7WT6IMS8kjkmQgnQCNTmZCt4owFRyWqFZP+hXphw5fMOqDI8YE2h9Q5c yl7Q== X-Gm-Message-State: ALoCoQlPiBLpdvAn+M18oTMSJwU0+qakZqhtiGFEmCx38IWmh6pqGRJ2aeHQNFtlknLo0UWpBxU7 X-Received: by 10.152.116.39 with SMTP id jt7mr8046999lab.82.1437033394944; Thu, 16 Jul 2015 00:56:34 -0700 (PDT) Received: from [192.168.1.89] (h165n2-ld-h-td2.ias.bredband.telia.com. [81.230.12.165]) by smtp.googlemail.com with ESMTPSA id bn2sm1811991lbc.47.2015.07.16.00.56.34 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 16 Jul 2015 00:56:34 -0700 (PDT) Message-ID: <55A763B1.4030709@mnt.se> Date: Thu, 16 Jul 2015 09:56:33 +0200 From: Leif Johansson User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: scim@ietf.org References: <2445B3FA-3FC6-4590-9E47-7940704B7293@oracle.com> In-Reply-To: <2445B3FA-3FC6-4590-9E47-7940704B7293@oracle.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [scim] Notification events X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jul 2015 07:56:39 -0000 On 2015-07-16 05:57, Phil Hunt wrote: > For those that will be at the IETF meeting next week, it occurs to me we > should follow up on notification events. > > One of the items that was interesting from CIS was the event > notifications that they were discussing like account take over, password > reset, etc. Might be interesting to see if there is overlap and if the > current SCIM Notify proposal should have some of the events described by > Andy Nash. > > We do have a BarBof planned for credentials. Would anyone like to meet > up to discuss this some time next week? i am but I'm also interested in finding somebody from the h/2 universe to include in this discussion From nobody Thu Jul 16 05:50:12 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C10251A89FC for ; Thu, 16 Jul 2015 05:50:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id owpX8mH57vkf for ; Thu, 16 Jul 2015 05:50:09 -0700 (PDT) Received: from userp1040.oracle.com (userp1040.oracle.com [156.151.31.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B96E1A89F9 for ; Thu, 16 Jul 2015 05:50:09 -0700 (PDT) Received: from aserv0021.oracle.com (aserv0021.oracle.com [141.146.126.233]) by userp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t6GCo7Wp008444 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 16 Jul 2015 12:50:08 GMT Received: from userv0121.oracle.com (userv0121.oracle.com [156.151.31.72]) by aserv0021.oracle.com (8.13.8/8.13.8) with ESMTP id t6GCo6Oi003144 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Thu, 16 Jul 2015 12:50:06 GMT Received: from abhmp0002.oracle.com (abhmp0002.oracle.com [141.146.116.8]) by userv0121.oracle.com (8.13.8/8.13.8) with ESMTP id t6GCo4Gs023367; Thu, 16 Jul 2015 12:50:05 GMT Received: from [10.0.1.20] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 16 Jul 2015 05:50:04 -0700 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) From: Phil Hunt X-Mailer: iPhone Mail (12F70) In-Reply-To: <55A763B1.4030709@mnt.se> Date: Thu, 16 Jul 2015 05:50:01 -0700 Content-Transfer-Encoding: 7bit Message-Id: <722D04CE-5D16-481D-AF26-7F42D94A346E@oracle.com> References: <2445B3FA-3FC6-4590-9E47-7940704B7293@oracle.com> <55A763B1.4030709@mnt.se> To: Leif Johansson X-Source-IP: aserv0021.oracle.com [141.146.126.233] Archived-At: Cc: "scim@ietf.org" Subject: Re: [scim] Notification events X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jul 2015 12:50:10 -0000 Agreed Phil > On Jul 16, 2015, at 00:56, Leif Johansson wrote: > >> On 2015-07-16 05:57, Phil Hunt wrote: >> For those that will be at the IETF meeting next week, it occurs to me we >> should follow up on notification events. >> >> One of the items that was interesting from CIS was the event >> notifications that they were discussing like account take over, password >> reset, etc. Might be interesting to see if there is overlap and if the >> current SCIM Notify proposal should have some of the events described by >> Andy Nash. >> >> We do have a BarBof planned for credentials. Would anyone like to meet >> up to discuss this some time next week? > > i am > > but I'm also interested in finding somebody from the h/2 universe to > include in this discussion > > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim From nobody Thu Jul 16 09:25:46 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A2061A92E3 for ; Thu, 16 Jul 2015 09:25:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mMfrpy3MB8F0 for ; Thu, 16 Jul 2015 09:25:42 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0746.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::746]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5B3C1ABD35 for ; Thu, 16 Jul 2015 09:25:41 -0700 (PDT) Received: from BN3PR0301MB1234.namprd03.prod.outlook.com (10.161.207.22) by BN3PR0301MB1236.namprd03.prod.outlook.com (10.161.207.24) with Microsoft SMTP Server (TLS) id 15.1.213.14; Thu, 16 Jul 2015 16:25:24 +0000 Received: from BN3PR0301MB1234.namprd03.prod.outlook.com ([10.161.207.22]) by BN3PR0301MB1234.namprd03.prod.outlook.com ([10.161.207.22]) with mapi id 15.01.0213.000; Thu, 16 Jul 2015 16:25:24 +0000 From: Anthony Nadalin To: Phil Hunt , SCIM WG Thread-Topic: [scim] Notification events Thread-Index: AQHQv3uTeIr5E5oZjEuZyivQHhlI3Z3eSRLv Date: Thu, 16 Jul 2015 16:25:24 +0000 Message-ID: References: <2445B3FA-3FC6-4590-9E47-7940704B7293@oracle.com> In-Reply-To: <2445B3FA-3FC6-4590-9E47-7940704B7293@oracle.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: oracle.com; dkim=none (message not signed) header.d=none; x-originating-ip: [166.170.38.158] x-microsoft-exchange-diagnostics: 1; BN3PR0301MB1236; 5:NKiQ7IDsvckgJQCVuhfIYAzYzCG0uU/6v2AQTvhR3kxrc9V6K0hNJHrClDTQjD2YX45IssPw4WwBLubX+9bFtkvvSkYoPUIP1BMYJGPDOg4Z4rufvW92Lqq7rNIQSuFnXowV3TTtUnc1YwqvQVcFJw==; 24:NiPFPavIYtw2IvDmMmbxgKhNnO46TCzDLJnuph72GlobyNXpCoSENu+XOpS/8/2tUtz5zhn9YfvHNOyMmHBrOH4rU1iPr4EaEJB12zsJWmI=; 20:r2lcKODTLj7cQaPFeaasCVvNubIIoRnJElHH+s4FgHRFrWYfUmeH5/vfHl2RPPpuhWjMldXmMYIsguA3d0JObw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN3PR0301MB1236; bn3pr0301mb1236: X-MS-Exchange-Organization-RulesExecuted x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401001)(5005006)(3002001); SRVR:BN3PR0301MB1236; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0301MB1236; x-forefront-prvs: 0639027A9E x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(2656002)(74316001)(19580405001)(54356999)(92566002)(102836002)(99286002)(76176999)(106116001)(2950100001)(5001770100001)(551544002)(2900100001)(5003600100002)(2420400003)(86362001)(19617315012)(16236675004)(77096005)(50986999)(561944003)(46102003)(19580395003)(189998001)(87936001)(77156002)(7110500001)(66066001)(107886002)(122556002)(16601075003)(40100003)(15975445007)(5001960100002)(5002640100001)(76576001)(62966003)(33656002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0301MB1236; H:BN3PR0301MB1234.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; Content-Type: multipart/alternative; boundary="_000_BN3PR0301MB1234E19AC3B473A45B49E8C0A6990BN3PR0301MB1234_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jul 2015 16:25:24.6687 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0301MB1236 Archived-At: Subject: Re: [scim] Notification events X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jul 2015 16:25:44 -0000 --_000_BN3PR0301MB1234E19AC3B473A45B49E8C0A6990BN3PR0301MB1234_ Content-Type: text/plain; charset="windows-1256" Content-Transfer-Encoding: quoted-printable I would Sent from my Windows Phone ________________________________ From: Phil Hunt Sent: =FD7/=FD15/=FD2015 8:57 PM To: SCIM WG Subject: [scim] Notification events For those that will be at the IETF meeting next week, it occurs to me we sh= ould follow up on notification events. One of the items that was interesting from CIS was the event notifications = that they were discussing like account take over, password reset, etc. Mig= ht be interesting to see if there is overlap and if the current SCIM Notify= proposal should have some of the events described by Andy Nash. We do have a BarBof planned for credentials. Would anyone like to meet up t= o discuss this some time next week? Phil @independentid www.independentid.com phil.hunt@oracle.com --_000_BN3PR0301MB1234E19AC3B473A45B49E8C0A6990BN3PR0301MB1234_ Content-Type: text/html; charset="windows-1256" Content-Transfer-Encoding: quoted-printable
I would

Sent from my Windows Phone
From: Phil Hunt
Sent: =FD7/= =FD15/=FD2015 8:57 PM
To: SCIM WG
Subject: [scim= ] Notification events

For those that will be at the IETF meeting next week, it occurs to me = we should follow up on notification events.

One of the items that was interesting from CIS was the even= t notifications that they were discussing like account take over, password = reset, etc.  Might be interesting to see if there is overlap and if th= e current SCIM Notify proposal should have some of the events described by Andy Nash.

We do have a BarBof planned for credentials. Would anyone l= ike to meet up to discuss this some time next week?

Phil

@independentid
www.ind= ependentid.com
phil.hunt@oracle.= com

--_000_BN3PR0301MB1234E19AC3B473A45B49E8C0A6990BN3PR0301MB1234_-- From nobody Thu Jul 16 09:27:20 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 029851ACD2D for ; Thu, 16 Jul 2015 09:27:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.309 X-Spam-Level: X-Spam-Status: No, score=-2.309 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YW5DQjmJTeV1 for ; Thu, 16 Jul 2015 09:27:17 -0700 (PDT) Received: from smtp.nexusgroup.com (smtp.nexusgroup.com [83.241.133.120]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D7DB01ACD28 for ; Thu, 16 Jul 2015 09:27:16 -0700 (PDT) Received: from NG-EX01.ad.nexusgroup.com (10.75.28.40) by NG-EX01.ad.nexusgroup.com (10.75.28.40) with Microsoft SMTP Server (TLS) id 15.0.995.29; Thu, 16 Jul 2015 18:27:15 +0200 Received: from NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab]) by NG-EX01.ad.nexusgroup.com ([fe80::1d3d:b319:f020:2bab%12]) with mapi id 15.00.0995.032; Thu, 16 Jul 2015 18:27:15 +0200 From: =?iso-8859-1?Q?Erik_Wahlstr=F6m_neXus?= To: Anthony Nadalin Thread-Topic: [scim] Notification events Thread-Index: AQHQv3uUzSqdLNsgbEOKYITNXjNd9p3eJ4oAgAAiCrs= Date: Thu, 16 Jul 2015 16:27:13 +0000 Message-ID: References: <2445B3FA-3FC6-4590-9E47-7940704B7293@oracle.com>, In-Reply-To: Accept-Language: en-US, sv-SE Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_A2F31B468D4347EC973F6F6BED4AA1D9nexusgroupcom_" MIME-Version: 1.0 Archived-At: Cc: SCIM WG , Phil Hunt Subject: Re: [scim] Notification events X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jul 2015 16:27:20 -0000 --_000_A2F31B468D4347EC973F6F6BED4AA1D9nexusgroupcom_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable +1 Sent from my iPhone On 16 Jul 2015, at 18:25, Anthony Nadalin > wrote: I would Sent from my Windows Phone ________________________________ From: Phil Hunt Sent: ?7/?15/?2015 8:57 PM To: SCIM WG Subject: [scim] Notification events For those that will be at the IETF meeting next week, it occurs to me we sh= ould follow up on notification events. One of the items that was interesting from CIS was the event notifications = that they were discussing like account take over, password reset, etc. Mig= ht be interesting to see if there is overlap and if the current SCIM Notify= proposal should have some of the events described by Andy Nash. We do have a BarBof planned for credentials. Would anyone like to meet up t= o discuss this some time next week? Phil @independentid www.independentid.com phil.hunt@oracle.com _______________________________________________ scim mailing list scim@ietf.org https://www.ietf.org/mailman/listinfo/scim --_000_A2F31B468D4347EC973F6F6BED4AA1D9nexusgroupcom_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
+1

Sent from my iPhone

On 16 Jul 2015, at 18:25, Anthony Nadalin <tonynad@microsoft.com> wrote:

I would

Sent from my Windows Phone
From: Phil Hunt
Sent: ̴= 6;7/‎15/‎2015 8:57 PM
To: SCIM WG
Subject: [scim= ] Notification events

For those that will be at the IETF meeting next week, it occurs to me = we should follow up on notification events.

One of the items that was interesting from CIS was the even= t notifications that they were discussing like account take over, password = reset, etc.  Might be interesting to see if there is overlap and if th= e current SCIM Notify proposal should have some of the events described by Andy Nash.

We do have a BarBof planned for credentials. Would anyone l= ike to meet up to discuss this some time next week?

Phil

@independentid
www.ind= ependentid.com
phil.hunt@oracle.= com

_______________________________________________
scim mailing list
scim@ietf.org
https://www.ie= tf.org/mailman/listinfo/scim
--_000_A2F31B468D4347EC973F6F6BED4AA1D9nexusgroupcom_-- From nobody Thu Jul 16 13:38:39 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A94DE1A8A68 for ; Thu, 16 Jul 2015 13:38:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.278 X-Spam-Level: X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ok4EKtHMx1Tk for ; Thu, 16 Jul 2015 13:38:36 -0700 (PDT) Received: from mail-ig0-x241.google.com (mail-ig0-x241.google.com [IPv6:2607:f8b0:4001:c05::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E05F1A8A47 for ; Thu, 16 Jul 2015 13:38:36 -0700 (PDT) Received: by igczg2 with SMTP id zg2so1868769igc.1 for ; Thu, 16 Jul 2015 13:38:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type:content-transfer-encoding; bh=JhAdpjgeAOwjTI2d15HhQo3TE4npGb5AjUmni+U7+Zo=; b=oJ6wftz9Lggog9TvEhorUOUchi1QQWyRvVbaSLvncrD294AmSOW/t2VcYdHnKOtn8O nM5QHYksM5tkLlVhkVjfUvvI83z/9ACkI/M7Jy2TthK35Twa4xeqRf1wunvkWewkA9DU tI7l2YvJalQM103v7YMFaYm5hZmT6Hn9rkfK+KHJx3Xv1l0mcsJs3CNaCFiO8L8qRRJO rnLVjd7J05wWUHtFYD3p17ahBFIbmMfJvn9ImUIn0q2KMzia6BS8ARcJa2lfkhjs+IaH 2/P6Prh7Cb3g7Gz7r2hQn2Q8QaGZyUNWG+xflgqurf/bA7IuV/eF6hUlFy14ajGor6Lk /I5g== MIME-Version: 1.0 X-Received: by 10.50.111.167 with SMTP id ij7mr6068781igb.49.1437079115979; Thu, 16 Jul 2015 13:38:35 -0700 (PDT) Sender: barryleiba.mailing.lists@gmail.com Received: by 10.107.133.95 with HTTP; Thu, 16 Jul 2015 13:38:35 -0700 (PDT) In-Reply-To: References: <5554B5B5.2000805@mnt.se> <5554B82B.9020109@mnt.se> <10136803-FF94-43A5-8666-1664DD4A63E5@oracle.com> <9B8D0122-309C-4CB5-8785-0955005F65D9@oracle.com> <555BE5C0.2020005@cs.tcd.ie> Date: Thu, 16 Jul 2015 16:38:35 -0400 X-Google-Sender-Auth: 5MqpmOd-g9t1rnaD9tBjNsjOjjk Message-ID: From: Barry Leiba To: "Morteza Ansari (moransar)" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: Anthony Nadalin , Stephen Farrell , Leif Johansson , "scim@ietf.org" , Phil Hunt Subject: Re: [scim] Prague? X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jul 2015 20:38:37 -0000 Reminding and confirming (and, yes, Stephen, I see you're on the list for t= his): The last session on Monday ends at 19:50, so let's meet 8:15-ish at the Prague Beer Museum, Dlouh=C3=A1 46, Prague 1 Barry On Fri, May 22, 2015 at 11:01 AM, Barry Leiba wro= te: >> I think we are set for Monday night. Barry, since you did the homework f= or >> bar options, do you want to pick one of them and post the location and >> time? > > Well, let's try hitting the Prague Beer Museum, > http://www.praguebeermuseum.com/en, and see how our luck is. Time: 30 > minutes after the end of the last session on Monday. Have to see when > that is after the agenda comes out. > > Barry From nobody Thu Jul 16 13:49:53 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D847E1A8AC0 for ; Thu, 16 Jul 2015 13:49:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.211 X-Spam-Level: X-Spam-Status: No, score=-4.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xyu3KvoIXcb6 for ; Thu, 16 Jul 2015 13:49:50 -0700 (PDT) Received: from aserp1040.oracle.com (aserp1040.oracle.com [141.146.126.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30D431A8ABD for ; Thu, 16 Jul 2015 13:49:50 -0700 (PDT) Received: from userv0022.oracle.com (userv0022.oracle.com [156.151.31.74]) by aserp1040.oracle.com (Sentrion-MTA-4.3.2/Sentrion-MTA-4.3.2) with ESMTP id t6GKnib8003233 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 16 Jul 2015 20:49:44 GMT Received: from aserv0121.oracle.com (aserv0121.oracle.com [141.146.126.235]) by userv0022.oracle.com (8.13.8/8.13.8) with ESMTP id t6GKnhF0027655 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Thu, 16 Jul 2015 20:49:43 GMT Received: from abhmp0015.oracle.com (abhmp0015.oracle.com [141.146.116.21]) by aserv0121.oracle.com (8.13.8/8.13.8) with ESMTP id t6GKngBq000412; Thu, 16 Jul 2015 20:49:42 GMT Received: from [10.0.1.20] (/24.86.216.17) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 16 Jul 2015 13:49:42 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) From: Phil Hunt X-Mailer: iPhone Mail (12F70) In-Reply-To: Date: Thu, 16 Jul 2015 13:49:39 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: References: <5554B5B5.2000805@mnt.se> <5554B82B.9020109@mnt.se> <10136803-FF94-43A5-8666-1664DD4A63E5@oracle.com> <9B8D0122-309C-4CB5-8785-0955005F65D9@oracle.com> <555BE5C0.2020005@cs.tcd.ie> To: Barry Leiba X-Source-IP: userv0022.oracle.com [156.151.31.74] Archived-At: Cc: Anthony Nadalin , Leif Johansson , "Morteza Ansari \(moransar\)" , "scim@ietf.org" , Stephen Farrell Subject: Re: [scim] Prague? X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jul 2015 20:49:52 -0000 See you there! Phil > On Jul 16, 2015, at 13:38, Barry Leiba wrote: >=20 > Reminding and confirming (and, yes, Stephen, I see you're on the list for t= his): > The last session on Monday ends at 19:50, so let's meet 8:15-ish at > the Prague Beer Museum, Dlouh=C3=A1 46, Prague 1 >=20 > Barry >=20 >=20 > On Fri, May 22, 2015 at 11:01 AM, Barry Leiba wr= ote: >>> I think we are set for Monday night. Barry, since you did the homework f= or >>> bar options, do you want to pick one of them and post the location and >>> time? >>=20 >> Well, let's try hitting the Prague Beer Museum, >> http://www.praguebeermuseum.com/en, and see how our luck is. Time: 30 >> minutes after the end of the last session on Monday. Have to see when >> that is after the agenda comes out. >>=20 >> Barry >=20 > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim From nobody Thu Jul 16 14:03:18 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E0DA1A8F43 for ; Thu, 16 Jul 2015 14:03:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.978 X-Spam-Level: X-Spam-Status: No, score=-1.978 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id omNsjJh9Bvik for ; Thu, 16 Jul 2015 14:03:15 -0700 (PDT) Received: from mail-ig0-f170.google.com (mail-ig0-f170.google.com [209.85.213.170]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7F81E1A8F3E for ; Thu, 16 Jul 2015 14:03:15 -0700 (PDT) Received: by iggf3 with SMTP id f3so23366413igg.1 for ; Thu, 16 Jul 2015 14:03:15 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-type; bh=vlw74V2QJJQRbK6PLrChBEKLUwhD1edPZ9967PqIYaw=; b=Xz49R0NCkvKobwyUTG9YujKKQas73gLuAzmipwHVHmmOhgkDyhJx2lhkgd4gjBkfsr WCnbRmLcpolPR7Cm7vtGPypzAWfuWXKOBBMMNDFQiPQat92zAfI6hR6Rugb74q4dJ2VB QIue0KbLXf191JXZ0OHfs5jW630kQgkBYKduka8cJuMaWjmqBCA42E6ZaYnJIAkw8oAx 0YjNuWtY2sT1dY29+RnA3ySglkUPsIzd2alANaQVgdJkGnwv6ZuD3/XPFjmSoQiLHRur LOKq/UXEz3D7YnQkGhpVAycls2fdy7/rpv3+bRywl6HLZmf4XLswVBxHKEzoQpVpNAFc gjNA== X-Gm-Message-State: ALoCoQnC4l4CFf7SyZzFldj0bduyaadOr95hI3SvpNKcvqhK65TTWC9/jo2jSG68M730FsAn12dx X-Received: by 10.50.66.129 with SMTP id f1mr6039540igt.7.1437080594819; Thu, 16 Jul 2015 14:03:14 -0700 (PDT) MIME-Version: 1.0 Received: by 10.36.220.134 with HTTP; Thu, 16 Jul 2015 14:02:55 -0700 (PDT) In-Reply-To: References: <5554B5B5.2000805@mnt.se> <5554B82B.9020109@mnt.se> <10136803-FF94-43A5-8666-1664DD4A63E5@oracle.com> <9B8D0122-309C-4CB5-8785-0955005F65D9@oracle.com> <555BE5C0.2020005@cs.tcd.ie> From: Ian Glazer Date: Thu, 16 Jul 2015 17:02:55 -0400 Message-ID: To: Barry Leiba Content-Type: multipart/alternative; boundary=047d7bdc0cf45e5912051b046671 Archived-At: Cc: Anthony Nadalin , "scim@ietf.org" , Leif Johansson , Stephen Farrell , "Morteza Ansari \(moransar\)" , Phil Hunt Subject: Re: [scim] Prague? X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jul 2015 21:03:17 -0000 --047d7bdc0cf45e5912051b046671 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Have one for me! On Thu, Jul 16, 2015 at 4:38 PM, Barry Leiba wrote: > Reminding and confirming (and, yes, Stephen, I see you're on the list for > this): > The last session on Monday ends at 19:50, so let's meet 8:15-ish at > the Prague Beer Museum, Dlouh=C3=A1 46, Prague 1 > > Barry > > > On Fri, May 22, 2015 at 11:01 AM, Barry Leiba > wrote: > >> I think we are set for Monday night. Barry, since you did the homework > for > >> bar options, do you want to pick one of them and post the location and > >> time? > > > > Well, let's try hitting the Prague Beer Museum, > > http://www.praguebeermuseum.com/en, and see how our luck is. Time: 30 > > minutes after the end of the last session on Monday. Have to see when > > that is after the agenda comes out. > > > > Barry > > _______________________________________________ > scim mailing list > scim@ietf.org > https://www.ietf.org/mailman/listinfo/scim > --=20 Ian Glazer Senior Director, Identity +1 202 255 3166 @iglazer --047d7bdc0cf45e5912051b046671 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Have one for me!

On Thu, Jul 16, 2015 at 4:38 PM, Barry Leiba <= barryleiba@computer.org> wrote:
Reminding and confirming (and, yes, Stephen, I see you're on the l= ist for this):
The last session on Monday ends at 19:50, so let's meet 8:15-ish at
the Prague Beer Museum, Dlouh=C3=A1 46, Prague 1

Barry


On Fri, May 22, 2015 at 11:01 AM, Barry Leiba <barryleiba@computer.org> wrote:
>> I think we are set for Monday night. Barry, since you did the home= work for
>> bar options, do you want to pick one of them and post the location= and
>> time?
>
> Well, let's try hitting the Prague Beer Museum,
> http://www.praguebeermuseum.com/en, and see how our luck = is.=C2=A0 Time: 30
> minutes after the end of the last session on Monday.=C2=A0 Have to see= when
> that is after the agenda comes out.
>
> Barry

_______________________________________________
scim mailing list
scim@ietf.org
https://www.ietf.org/mailman/listinfo/scim



--
=
Ian Glazer
Senior Director, Identity
+1 202 255 3166
--047d7bdc0cf45e5912051b046671-- From nobody Mon Jul 20 05:32:42 2015 Return-Path: X-Original-To: scim@ietfa.amsl.com Delivered-To: scim@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 321821A86FF for ; Mon, 20 Jul 2015 05:32:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.51 X-Spam-Level: X-Spam-Status: No, score=-14.51 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T8h93erUnzar for ; Mon, 20 Jul 2015 05:32:39 -0700 (PDT) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 07FBA1A86FC for ; Mon, 20 Jul 2015 05:32:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1512; q=dns/txt; s=iport; t=1437395559; x=1438605159; h=from:to:subject:date:message-id:mime-version; bh=NxjVoTxXaS6qflbTib/7dI481RQdoW8mYt/03+Jo1M4=; b=Idq8a52E/9TdYoOq6uasCBcXUvAuOIw4dklBHzEcgU++UrqgZpf1tPqJ SB0DgRpTEwH1Rp8L34R7kER6yOFZoGUgXVmSKP3LYbR2eMSpfELEmHRf8 xLWNMrFIHHkrazVvvY5J/7KoioM5sx/+Cpck6WrYLK7MGDKT7GWMYDH9g Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AiBQAh6axV/5ldJa1cgkZNgUPFAjwQAQEBAQEBAYEKhBoQgQsBCwF0JwQBiEDFegEBAQcBAQEBAR2VBAWMcIdiAYwgmQcmY4MZgjaBBAEBAQ X-IronPort-AV: E=Sophos; i="5.15,507,1432598400"; d="scan'208,217"; a="16988570" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-2.cisco.com with ESMTP; 20 Jul 2015 12:32:38 +0000 Received: from xhc-aln-x02.cisco.com (xhc-aln-x02.cisco.com [173.36.12.76]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id t6KCWc3G025806 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 20 Jul 2015 12:32:38 GMT Received: from xmb-rcd-x08.cisco.com ([169.254.8.116]) by xhc-aln-x02.cisco.com ([173.36.12.76]) with mapi id 14.03.0195.001; Mon, 20 Jul 2015 07:32:38 -0500 From: "Morteza Ansari (moransar)" To: "scim@ietf.org" , Stephen Farrell Thread-Topic: SCIM bar meeting tonight at 8:15 Thread-Index: AQHQwugpOM3hGnbXg06rNnEgGPrhfQ== Date: Mon, 20 Jul 2015 12:32:37 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.5.2.150604 x-originating-ip: [10.24.52.105] Content-Type: multipart/alternative; boundary="_000_D1D2B6D912BA7Cmoransarciscocom_" MIME-Version: 1.0 Archived-At: Subject: [scim] SCIM bar meeting tonight at 8:15 X-BeenThere: scim@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Simple Cloud Identity Management BOF List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jul 2015 12:32:40 -0000 --_000_D1D2B6D912BA7Cmoransarciscocom_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I had a few folks ask me about the timing for our bar meeting tonight. So h= ere is another reminder. We are meeting at 8:15 tonight at the Prague Beer Museum, Dlouh=E1 46, Prag= ue 1. Join us if you are around. Cheers, Morteza --_000_D1D2B6D912BA7Cmoransarciscocom_ Content-Type: text/html; charset="iso-8859-1" Content-ID: <6FE5C00FAE8410469E01C553EB6B78AD@emea.cisco.com> Content-Transfer-Encoding: quoted-printable
I had a few folks ask me about the ti= ming for our bar meeting tonight. So here is another reminder.

We are meeting at 8:15 tonight at the= Prague Beer Museum, Dlouh=E1 46, Prague 1. Join us if you are around.


Cheers,
Morteza
--_000_D1D2B6D912BA7Cmoransarciscocom_--