IMS Security Framework 1.1

The IMS Security Framework defines the security approaches that should be used when implementing IMS specifications. Version 1.0 was published in May 2019 and several IMS specifications, including LTI Advantage, OneRoster and Comprehensive Learner Record, already make use of the recommended patterns. Version 1.1 of the IMS Security Framework was published in July 2021. This new version adds several important new features including Token Refresh, Token Revocation, and most significantly, support for Dynamic Client Registration (DCR). Version 1.1 is backwards compatible with version 1.0. All of the new features were added because various IMS specifications required them e.g. DCR for LTI Advantage and Open Badge Connect API. Responsibility for maintaining the Security Framework and monitoring its adoption in the IMS specifications is the responsibility of the IMS Security Committee. This committee makes an annual report on the status of the Security Framework and its adoption. The IMS Chief Architect will give an overview of this new version and will give insights into what next for the Security Framework.

Speaker
--Colin Smythe, Chief Architect, IMS Global Learning Consortium