# Certification Progress

## Attendees
* Alex Olivier
* Edmund Jay

## Notes

- Previously Agreed to use interop payloads for the certifications
- Have done the basic evaluation API using the todo app payloads
- Working now on the evaluations API next, then search
- Problems with the todo app
- There is an owner ID property in the request which is interop specific
- The PDP being certified needs to have knowledge of the data expected in the policy
- It is down to the WG to decide on whether we require a set of use cases are implemented in policy by PDP
- Existing OIDC, FAPI etc don't specify the data for specific use cases.
- eg OIDC just needs _any_ user in the IdP to test the flow of token issuance, it doesn't rely on anything around specific harness scopes/claims
- OpenID VC/CP have an interop profile which does have a set of expected feilds/behavior to pass the certification.
- https://openid.net/specs/openid4vc-high-assurance-interoperability-profile-1_0-05.html
- Need to document the interop profile for the certification harness explicity with expectations of how the PDP should behave (this could be based on the existing interops, but combined into a single resource) or else it wouldn't be possible to test the resposne formats

- Action:
- WG to agree on what the scenario we use for the harness
- Edmund to get the existing work up on the [certificaton portal](https://www.certification.openid.net/?continue)
- AO to combine the existing interop scenarios into a single resource set and get a (Cerbos) PDP deployed to test the harness against