audio is good
", "time": "2026-03-19T01:01:38.000Z"}, {"author": "Paul Lanzi", "text": "little bit of an echo but not disruptive
", "time": "2026-03-19T01:02:33.000Z"}, {"author": "Deb Cooley", "text": "wow, I need that for plants.... agenda gardening.
", "time": "2026-03-19T01:06:05.000Z"}, {"author": "Unmesh Vartak", "text": "I can review.. it was on my TODO list but I lost track. Apologies.
", "time": "2026-03-19T01:08:15.000Z"}, {"author": "Macy Abbey", "text": "I can review as well.
", "time": "2026-03-19T01:08:36.000Z"}, {"author": "Danny Zollner", "text": "I'll review.
", "time": "2026-03-19T01:08:37.000Z"}, {"author": "Nancy Cam-Winget", "text": "Thank you for volunteering to review!
", "time": "2026-03-19T01:13:21.000Z"}, {"author": "Macy Abbey", "text": "Some pieces of feedback.
\n1) Counts are expensive to compute, since this draft is explicitely addressing problems with very large group membership populations, I'd lean toward omiting memberCount entirely.
\n2) nit: memberMetadata.policy suggest a different name due to overloading of policy, perhaps clientHint ? Also wondering why this isn't in the ServiceProviderConfig.
\n3) Stray thought, would you want to patch any of the meta attributes in membership? Like when it was last updated?
@Macy: good feedback, can you please echo these on the mail list (or in Danny's Git) so they're captured?
", "time": "2026-03-19T01:22:42.000Z"}, {"author": "Macy Abbey", "text": "Sure thing
", "time": "2026-03-19T01:25:25.000Z"}, {"author": "Paul Lanzi", "text": "yes - let's get rid of the password attribute!
", "time": "2026-03-19T01:36:14.000Z"}, {"author": "Macy Abbey", "text": "I could see both of Danny's drafts being part of a 2.1 or 3.0
", "time": "2026-03-19T01:43:12.000Z"}, {"author": "Unmesh Vartak", "text": "+1.. 2.1 to make SCIM more relevant with current scenarios
", "time": "2026-03-19T01:45:01.000Z"}, {"author": "Yaroslav Rosomakho", "text": "This really seems more of a \"2.1\"
", "time": "2026-03-19T01:45:33.000Z"}, {"author": "Unmesh Vartak", "text": "I was hoping SCIM 3.0 will attempt consolidation of SCIM extensions.. this will be more pragmatic improvement to 2.0
", "time": "2026-03-19T01:46:13.000Z"}, {"author": "Macy Abbey", "text": "I appreciated the 2.1 approach in OAuth and how it \"trimmed the tree\" as Paul mentioned.
", "time": "2026-03-19T01:46:20.000Z"}, {"author": "Justin Richer", "text": "OAuth 2.1 has still taken many years
", "time": "2026-03-19T01:46:36.000Z"}, {"author": "Aaron Parecki", "text": "don't remind me :see_no_evil:
", "time": "2026-03-19T01:46:48.000Z"}, {"author": "Justin Richer", "text": "backwards compatibility is key in versioning like this, it sets expectations
", "time": "2026-03-19T01:46:52.000Z"}, {"author": "Nancy Cam-Winget", "text": "I don't think there's a proposal to be a set of RFC's....it's more a trimming to a Profile to ensure we have interoperability.
", "time": "2026-03-19T01:50:39.000Z"}, {"author": "Christopher Inacio", "text": "good work. ;)
", "time": "2026-03-19T01:53:50.000Z"}, {"author": "Danny Zollner", "text": "Slowly lowering via a rope..?
", "time": "2026-03-19T01:56:45.000Z"}, {"author": "Deb Cooley", "text": ":point_up:
", "time": "2026-03-19T01:57:07.000Z"}, {"author": "Pamela Dingle", "text": "I will volunteer
", "time": "2026-03-19T01:57:43.000Z"}, {"author": "Pamela Dingle", "text": "and put it in the notes :-D
", "time": "2026-03-19T01:57:51.000Z"}, {"author": "Danny Zollner", "text": "Justin - I think that one of the key problems we need to get a handle on is \"what is an agent\" - there's a whole pile of taxonomy related questions that aren't answered yet (AFAIK), and a bunch of them probably aren't something that the SCIM WG can solve on its own since it has to align with how \"the industry\" builds things as well.
", "time": "2026-03-19T02:06:11.000Z"}, {"author": "Macy Abbey", "text": "Another theme we've been aligning on, is \"less is more\", with how much is unknown and changing, including more and more speculative features to the extension seems unwise.
", "time": "2026-03-19T02:08:45.000Z"}, {"author": "ismael", "text": "sounds good, newbie mistake :)
", "time": "2026-03-19T02:10:21.000Z"}, {"author": "Paul Lanzi", "text": "I also sit on the OpenID Foundation's Agentic Identity Community Group -- I think it would be great for Pam (or I can do it if the OpenID foundation rules require a member to) to present this at one of those meetings as well
", "time": "2026-03-19T02:10:27.000Z"}, {"author": "Paul Lanzi", "text": "Great. This lines up well with the kinds of things that have been discussed there.
", "time": "2026-03-19T02:11:17.000Z"}, {"author": "Nancy Cam-Winget", "text": "@Paul, while I agree, I think they've split to several groups...is the general one still running? That would be the one to go to
", "time": "2026-03-19T02:12:04.000Z"}, {"author": "Paul Lanzi", "text": "Yes, the general one and the split groups gather on alternating weeks
", "time": "2026-03-19T02:12:21.000Z"}, {"author": "Grace Rachmany", "text": "I'm not technical enough to understand all of this, but we do have a working group on Agentic Identity going in DIF and you're welcome to join on that as well.
", "time": "2026-03-19T02:12:40.000Z"}, {"author": "Pamela Dingle", "text": "Thanks Grace, we will reach out and see if that can work
", "time": "2026-03-19T02:13:39.000Z"}, {"author": "Deb Cooley", "text": "spit test: :100:
", "time": "2026-03-19T02:15:47.000Z"}, {"author": "Pieter Kasselman", "text": "WIMSE is compatible with SPIFFE (superset of concepts)
", "time": "2026-03-19T02:20:56.000Z"}, {"author": "Christopher Inacio", "text": "WHAT SHE SAID!!!
", "time": "2026-03-19T02:22:06.000Z"}, {"author": "Deb Cooley", "text": "draft-klrc-aiagent-auth
", "time": "2026-03-19T02:25:23.000Z"}, {"author": "Pieter Kasselman", "text": "https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/
", "time": "2026-03-19T02:29:14.000Z"}, {"author": "Danny Zollner", "text": ":turtle:
", "time": "2026-03-19T02:30:27.000Z"}, {"author": "Grace Rachmany", "text": "From what I can see, there's a spectrum of applications that go from \"Agents are deployed for defined tasks within the organization\" (like APIs/workloads) on the one extreme... all controlled centrally in some way. On the other end of the spectrum there is \"Individual people deploy Agents on their behalf.\" (Agents need identity that is tied to the human's identity.)
", "time": "2026-03-19T02:31:06.000Z"}, {"author": "Deb Cooley", "text": "sometimes you get bonus time. sometimes you get shorter time.
", "time": "2026-03-19T02:35:12.000Z"}, {"author": "Paul Lanzi", "text": "thanks!
", "time": "2026-03-19T02:35:36.000Z"}, {"author": "Christopher Inacio", "text": "thanks everyone, great discussion
", "time": "2026-03-19T02:35:37.000Z"}, {"author": "Danny Zollner", "text": "Thanks!
", "time": "2026-03-19T02:35:39.000Z"}]