[OAUTH-WG] Protocol Action: 'Authentication Method Reference Values' to Proposed Standard (draft-ietf-oauth-amr-values-08.txt)

The IESG <iesg-secretary@ietf.org> Mon, 10 April 2017 17:47 UTC

MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
Auto-Submitted: auto-generated
Precedence: bulk
Cc: The IESG <iesg@ietf.org>, draft-ietf-oauth-amr-values@ietf.org, oauth@ietf.org, Kathleen.Moriarty.ietf@gmail.com, Hannes Tschofenig <Hannes.Tschofenig@gmx.net>, Hannes.Tschofenig@gmx.net, oauth-chairs@ietf.org, rfc-editor@rfc-editor.org
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Message-ID: <149184642980.3056.4025326913736470102.idtracker@ietfa.amsl.com>
Date: Mon, 10 Apr 2017 10:47:09 -0700
Archived-At: <https://mailarchive.ietf.org/arch/msg/oauth/anXIyIWLadGv-oriq7Rypv1bQPc>
Subject: [OAUTH-WG] Protocol Action: 'Authentication Method Reference Values' to Proposed Standard (draft-ietf-oauth-amr-values-08.txt)

The IESG has approved the following document:
- 'Authentication Method Reference Values'
  (draft-ietf-oauth-amr-values-08.txt) as Proposed Standard

This document is the product of the Web Authorization Protocol Working
Group.

The IESG contact persons are Kathleen Moriarty and Eric Rescorla.

A URL of this Internet Draft is:
https://datatracker.ietf.org/doc/draft-ietf-oauth-amr-values/





Technical Summary

   The "amr" (Authentication Methods References) claim is defined and
   registered in the IANA "JSON Web Token Claims" registry but no
   standard Authentication Method Reference values are currently
   defined.  This specification establishes a registry for
   Authentication Method Reference values and defines an initial set of
   Authentication Method Reference values.

Working Group Summary

   The working group had solid consensus, no issues.

Document Quality

A number of implementations exist and include:
Implementations of the OpenID Mobile Authentication Profile, 
which is defined by the MODRNA working group, use “amr” values.
This includes all the GSMA Mobile Connect deployments.

Microsoft Azure Active Directory and Microsoft Active Directory 
Federation Services (ADFS) use “amr” values.

Google’s identity provider uses “amr” values.

There is one downref noted in the shepherd report and last call announcement:
The following document is a non-IETF document that may require a downward
reference: 

   [OpenID.Core]
              Sakimura, N., Bradley, J., Jones, M., de Medeiros, B., and
              C. Mortimore, "OpenID Connect Core 1.0", November 2014,
              <http://openid.net/specs/openid-connect-core-1_0.html>.

Personnel

Hannes Tschofenig is the document shepherd and the responsible area 
director is Kathleen Moriarty. 

 If the document requires IANA
   experts(s), insert 'The IANA Expert(s) for the registries
   in this document are John Bradley, Brian Campbell,
   Michael B. Jones, and Chuck Mortimore.  The DEs match
   that of the IANA "JSON Web Token Claims" registry 
   [IANA.JWT.Claims]

IANA Note

 The document creates a new registry for Authentication Method Reference 
(AMR) values and populates the registry with an initial set of values.  
Values are registered on an Expert Review [RFC5226] basis after a
 three-week review period on the jwt-reg-review@ietf.org mailing list,
 on the advice of one or more Designated Experts.

[OAUTH-WG] Protocol Action: 'Authentication Metho… The IESG