XSPA

As required in the OASIS Technical Committee Process, the XSPA TC hereby submits a formal request to submit the Committee Specification "xspa-ws-trust-profile-cs-01" to the Membership of OASIS for consideration as an OASIS Standard.

The required additional information follows:

(a) Links to the approved Committee Specification in the TC's document repository, and any appropriate supplemental documentation for the specification, both of which must be written using the OASIS templates. The specification may not have been changed between its approval as a Committee Specification and its submission to OASIS for consideration as an OASIS Standard, except for the changes on the title page and running footer noting the approval status and date.

http://docs.oasis-open.org/xspa/ws-trust-v1.0/xspa-ws-trust-profile-cs-01.pdf

Announcement:
http://www.oasis-open.org/apps/org/workgroup/xspa/email/archives/201009/msg00004.html

As XSPA Co-Chair, I certify that the specification has not been changed between its approval as a Committee Specification and its submission to OASIS for consideration as an OASIS Standard, except for the changes on the title page and running footer noting the approval status and date.

(b) The editable version of all files that are part of the Committee Specification;

The editable versions of all files that are part of the Committee Specification was submitted to Kim Goolsby for conversion from the CD format to the CS format. The original CD files are found at:

http://www.oasis-open.org/committees/download.php/39108/ws-trust-xspa-1.0-cd06.zip

Announcement:
http://www.oasis-open.org/apps/org/workgroup/xspa/email/archives/201008/msg00026.html

(c) Certification by the TC that all schema and XML instances included in the specification, whether by inclusion or reference, including fragments of such, are well formed, and that all expressions are valid;

Certification appears in the August 5, 2010 minutes of the XSPA TC at:

http://www.oasis-open.org/apps/org/workgroup/xspa/email/archives/201008/msg00020.html

Wherein the minutes state:
TC commented that the XML was well-formed and consistent with that used in the RSA 2010 InterOp of the profile.

(d) A clear English-language summary of the specification;

Summary:
This specification describes a framework that provides access control interoperability useful in the healthcare environment. Interoperability is achieved using WS-Trust secure token request/response elements to carry common semantics and vocabularies in exchanges specified below.

(e) A statement regarding the relationship of this specification to similar work of other OASIS TCs or other standards developing organizations;

Relationship of this specification to similar work of other OASIS TCs:

This specification uses the OASIS Standard, "WS-Trust, Version 1.3" (March 2007). The work was done in collaboration with the WS-SX TC where the work began as a work item before it was moved to the XSPA TC. The specification is consistent with the OASIS Standards, "Cross-Enterprise Security and Privacy Authorization (XSPA) Profile of Security Assertion Markup Language (SAML) for Healthcare Version v1.0" (November2009) and "Cross-Enterprise Security and Privacy Authorization (XSPA) Profile of XACML v2.0 for Healthcare Version v1.0" (November2009).

(f) The Statements of Use presented above;

The statement of use from three members were listed in the August 5, 2010 minutes of the XSPA TC at:

http://www.oasis-open.org/apps/org/workgroup/xspa/email/archives/201008/msg00020.html

They are:

IBM:
http://www.oasis-open.org/apps/org/workgroup/xspa/email/archives/201008/msg00006.html
Oracle
http://www.oasis-open.org/apps/org/workgroup/xspa/email/archives/201008/msg00015.html
Jericho Systems Corporation:
http://www.oasis-open.org/apps/org/workgroup/xspa/email/archives/201008/msg00007.html

(g) The beginning and ending dates of the public review(s), a pointer to the announcement of the public review(s), and a pointer to an account of each of the comments/issues raised during the public review period(s), along with its resolution;

The beginning and ending dates of the public review were:

27 April 2010 to 26 June 2010

The announcement of the public review can be found at:

http://www.oasis-open.org/apps/org/workgroup/xspa/email/archives/201004/msg00015.html

Link to Comment Resolution Log of all comments is at:

http://www.oasis-open.org/apps/org/workgroup/xspa/email/archives/201007/msg00004.html

(h) An account of and results of the voting to approve the specification as a Committee Specification, including the date of the ballot and a pointer to the ballot;

The result of the voting on the ballot to approve the specification as a Committee Specification (closing 2 September 2010) was:
Five in favor, one abstention, and no negative votes.

Link to the ballot:

http://www.oasis-open.org/apps/org/workgroup/xspa/ballot.php?id=1934

An account of or pointer to votes and comments received in any earlier attempts to standardize substantially the same specification, together with the originating TC's response to each comment;

There has not been any earlier attempt to standardize substantially the same specification.

(j) A pointer to the publicly visible comments archive for the originating TC;

Link to the xspa-comment archive:

http://www.oasis-open.org/apps/org/workgroup/xspa/email/archives/

(k) A pointer to any minority reports delivered by one or more Members who did not vote in favor of approving the Committee Specification, which report may include statements regarding why the member voted against the specification or that the member believes that Substantive Changes were made which have not gone through public review; or certification by the Chair that no minority reports exist.

As co-chair I certify that no minority reports exist.