WLCG AuthZ Call


Proposed agenda: 


Zoom meeting:

Topic: WLCG AuthZ Call
Time: Apr 30, 2020 03:00 PM Zurich

Join Zoom Meeting

Meeting ID: 949 2141 5659
Password: 075474
One tap mobile
+41432107108,,94921415659# Switzerland
+41315280988,,94921415659# Switzerland

Dial by your location
        +41 43 210 71 08 Switzerland
        +41 31 528 09 88 Switzerland
        +41 43 210 70 42 Switzerland
        +33 7 5678 4048 France
        +33 1 7037 2246 France
        +33 1 7037 9729 France
Meeting ID: 949 2141 5659
Find your local number: https://cern.zoom.us/u/ac0xEcACgz

Join by SIP

Join by H.323 (US West) (US East) (India Mumbai) (India Hyderabad) (EMEA) (Australia) (Hong Kong
 China) (Brazil) (Canada) (Japan)
Meeting ID: 949 2141 5659
Password: 075474

Attendees: Dave D, Andrea, Brian, Burt, Ian C, Tom D, Will F, Irwin G, Jason, Jeny, Linda, Mischa, Liz, Mine, Jeffrey, Hannah


  • OIDC claims are standardised
    • Should be requested via scopes
    • Which bits of data should attribute authority collect https://openid.net/specs/openid-connect-core-1_0.html#StandardClaims ?
      • sub, name, family name, given name, email (similar to Research and Scholarship Attribute Bundle REFEDS) 
      • would be requested via "profile" scope, if the scope is not requested then you don't get the data
    • eduperson_assurance why optional? If it is known it should be populated. 
    • In general only need to be prepared for required claims
    • Can always use token introspection endpoint to get e.g. mail and name for traceability
  • This time is OK for the recurring call, i.e. 15:00 Geneva 


  • Brian to tidy Location Doc
  • Hannah organise next call
  • Hannah and Andrea to share slides for GDB update next week
There are minutes attached to this event. Show them.
The agenda of this meeting is empty