2025‐09‐23

IPSIE WG Meeting Minutes

Date: 2025-09-23

Attendees

• Aaron Parecki (Okta)
• George Fletcher (Practical Identity LLC)
• Travis Tripp (HPE GreenLake)
• Jeff Bounds (SailPoint)
• Dick Hardt (Hellō)
• Mike Kiser (SailPoint)
• Steinar Noem (Udelt AS)
• Shannon Roddy (self)
• Buster Doney (self)

Agenda

• Welcome and antitrust policy reminder https://openid.net/policies/

• OpenID Contributor Agreement reminder https://openid.net/intellectual-property

• Reminder about OpenID Slack

• Community Events

  • OAuth Working Group interim meetings in September
    • https://events.oauth.net/
  • Identity Fabric - Dick
    • https://www.kuppingercole.com/events/ifid2025/agenda#1
  • IPSIE panel at Oktane - Sep 25-26
  • SailPoint's Navigate - Sep 29 week
  • Authenticate, October 13 - 15 in Carlsbad, CA
  • IIW XVI October 21 - 23 in Mountain View, CA
    • https://www.eventbrite.com/e/internet-identity-workshop-iiwxli-41-2025b-tickets-1393125719529?aff=oddtdtcreator
  • IIW Agentic AI unconference on October 24 (Friday)
    • https://agenticinternetworkshop.org/
  • IETF 124, November 1 - 7 in Montreal, Canada

• Call for adoption of SCIM IL1 Profile ended Sep 22. Result: adopted

• Resolution of IL1/AL1

• Interop Event Planning

• AOB

Notetaker: Collective effort

Notes:

• Identity Fabric - Dick - in Munich. Will post PDF of slides to the list. 80% of audience found the talk useful.
• Changes to levels doc - naming - account lifecycles
• Need to harmonize phrasing of AL[1,2,3] requirements between RP and IdP e.g. "suspend, archive, delete" vs "deprovision", also replace "users" with "accounts"
• SCIM IL1 Profile
  • rename to AL1 then post snapshot to openid.net/specs
  • as a working group, edit the doc to add section headers for each AL1/2/3 level in the single doc
• Interop event topic...
• Initial attempt at drafting a conformance profile: https://github.com/openid/ipsie/pull/114
• Scheduling: Potentially reschedule or change scoping to something achievable in January
• Present state of applications: Dick: interop isn't super interesting, it's compliance that moves the needle
  • Checklist of configuration items for an RP
  • "Here's what you need to do to be IPSIE XXX compliant"
  • Proposing this as a talk at a conference
  • Mike: value in the interop because it pushes vendors to support conformance
  • Dick: In IPSIE, we're profiling protocols that have been interoperable for years/decades, so interop is less interesting than conformance
  • Aaron: January is probably too aggressive for scheduling

Todo

• Cancel January event, find event/date between April-July for future interop event
• Focus future meetings on getting OpenID SL1 and SCIM AL1/2 stable for conformance test development
• Review proposed OpenID SL1 stable PR for getting a head start on conformance test development