September 8, 2020
The InCommon Community Trust and Assurance Board (CTAB) has opened a consultation on a second set of Baseline Expectations, including three technical requirements aimed at improving security and the user experience.
Please review these expectations and take this opportunity to provide feedback. CTAB invites your input through October 19, 2020, prior to finalizing these requirements.
The InCommon community adopted Baseline Expectations for Trust in Federation in 2018, including a set of common expectations that all participants must meet. The effort concluded successfully in February 2019, when 100 percent of Federation participants met those expectations.
Baseline Expectations 2 (BE2) proposes three additional elements that all participants must meet by 2021.
- Each Identity Provider and Service Provider will secure its connection endpoints with current and trusted encryption (TLS)
- All Identity Providers and Service Providers will comply with the SIRTFI international security response framework
- All Identity Providers will include an error URL in metadata
We will hold a community presentation and discussion on Wednesday, September 23 to provide a summary and answer questions about BE2. Details and Zoom coordinates are below.
The Baseline Expectations have improved the interoperability and security of the InCommon Federation, and these three additional elements are the next logical progression. Thank you for your support of Baseline and helping the community reach 100% adherence to these, just as we did during the first round.
Here are the details on the September 23 community presentation and discussion:
Baseline Expectations Community Presentation and Discussion
Wednesday, September 23, 2020
2 pm ET / 1 pm CT / Noon MT / 11 am PT
To join Zoom at the time of the webinar:
US: +1 312 626 6799 or +1 646 558 8656 or +1 301 715 8592 or +1 346 248 7799 or +1 669 900 6833 or +1 253 215 8782
Webinar ID: 935 7438 9824
International numbers available: https://internet2.zoom.us/u/aPcgfKbSe