...
0 sign-on
DATE: 21 November 2012
TIME: 10:30
ROOM: Main
TOPIC:
CONVENER: Klaas
SCRIBE: Brook
# of ATTENDEES: 12 (Lukas, Anders, Nicole, Rhys, Tom, Ajay, Milan, Niels, Marten, Marko)
MAIN ISSUES DISCUSSED
- eduroam profile can be installed on a device and an unlocked device is always on.
- What is the differentiation between this + Moonshot? Very different.
- How is this similar/dissimilar to DANE?
- This works for eduroam - but does your "starbucks" login carry forward?
- Many school districts are purchasing devices that are "loaned" to students for a period of time.
- Compelling case of joining "network login" with "application login"?
- Current profiles on mobile devices require multiple usernames and passwords to be requested.
- This is very similar to the provisioning of a client certificate.
- Is InCert a solution for this? The user only needs to link the cert with the IdP.
- There is a device setup (provisioning) problem AND an authentication (corporate, network) problem to solve.
- EAP-TLS is prone to the RADIUS fragmentation problem. Moonshot team are looking at solving this. But it will take time.
- Device support for client certificate is poor. Only Android 4 supports this - and only with the default browser - not with Firefox.
ACTIVITIES GOING FORWARD / NEXT STEPS
- ..Discuss with Stefan a revision to the collaboration between InCert and CAT.
RESOURCES
- ...
If slides, websites or other pointers for information are used in the session, please attach them to this page or send them to the secretary for posting.
...