Smart User Managed Access Demo

Session Topic: UMA SMART AM Demo (W2E)

Convener: Maciej M. ,Lukasz

Notes-taker(s): Maciej W.

Tags for the session - technology discussed/ideas considered:

Discussion notes, key understandings, outstanding questions, observations, and, if appropriate to this discussion: action items, next steps:

1. Smart AM, Gallerify, Smart fetch explanation - which party does what and how.

2. Registering an album at Gallerify.me

3. Loging into Smart AM by means of ID provider - Facebook for the purpose of this use case.

4. Smart AM as a predefined AM - granting it access at Gallerify.

5. Explanation of providing sharing permissions to the AM form a Host application (Gallerify.me in this case).

6. Suggestion of introducing a new feature of Import/export permissions from/to another application.

7. Setting up sharing permissions.

8. Posting on the Facebook wall.

9. Accessing data by means of a requester application: http://smartfetch.net in this case.

10. OAuth flow - notification about the location of the data and allowing saring permissions.

11. Q: Accessing registered resources as a Smart AM non-user. Providing Smart AM only with a proof of identity (by means of Facebook in this case).

12. Revoking access and changin permissions. Accessing data only with an external application.

13. Denying access with host application (Gallerify.me in this case).

14. Redirection problem. Authorising Facebook to be and extension to be also an ID provider.

15. Facebook friends for the purpose of this use case.

16. Future features.

17. Q: Does Gallerify.me know the access request to the Smart AM?