Security Chapter - Sprint 5.3.2 Status Cyril Dangerville (TS), Chapter Architect, Authorization PDP GE owner Alvaro Alonso (DIT-UPM), IdM & PEP Proxy GE owner 13 June 2016

Achieved in 5.3.2 Fixed remaining issues reported by Quality Assurance Software bugs: Policy still visible in PAP API after deleting last remaining version of the policy Doc issues: Missing information on PAP API - Attribute providers management operation Extensions: Pluggable XACML Result filter (for developers to customize processing of the XACML response) Updated documentation on the new features Release 5.3.0

Planned for 5.3.3 Contact OASIS XACML TC to add Authzforce (GEri) to the public list of XACML implementations on XACML website Join/contribute Apache project & community OpenAz for sharing open source XACML tools/libs with the OS community Provide performance dataset for Authzforce to help developers test performance (e.g. QA team)

Identity Management GE – KeyRock (UPM) Achieved in 5.3.2 IoT support Sensor registration Token validation from sensors Horizon UI Tests Bug fixing 6 bugs

Identity Management GE – KeyRock (UPM) Planned for 5.3.3 Endpoints management tool Design and first steps AuthZForce version 5 compatibility

PEP Proxy GE – Wilma (UPM) Achieved in 5.3.2 Sanity checks Feature Check connection Check authentication Bug fixing

PEP Proxy GE – Wilma (UPM) Planned for 5.3.3 AuthZForce version 5 compatibility