identity & access control in the cloud name title organization
TRANSCRIPT
Identity & Access Control in the Cloud
NameTitleOrganization
Agenda
Claims Will Get the Job Done
Claims Based Identity & WIF
WIF & Windows Azure
Windows Azure Active Directory Access Control
More Scenarios
Claims Will Get the Job Done
ScenariosWindows
Azure
Claims Based Identity & WIF
Windows Azure
A Service-Oriented Approach to Identity
Windows Azure
Claims-Based IdentityClaims
Active Directory
Federation Services 2Windows Server RoleAn STS for ADWS-Federation, WS-Trust, SAML
Basic Use of WIF with a Web Role
Demo
WIF Pipeline for ASP.NET
FAM SAM CAMRedirectToken handlingClaims filtering
Session Claims-BasedAuthorization
Windows Azure
Claims
WIF & Windows Azure
Windows Azure
WIF in Windows Azure
URI Certificates
Sessions
Windows Azure Active Directory Access Control
Authenticating Users from Business Partners (I)
Windows Azure
Authenticating Users from Business Partners (II)
Windows Azure
Windows Azure
Active Directory Access ControlHost an STS in cloud for you
Handles relationships with business and social Ips
WS-Federation, WS-Trust, Open ID, OAuth
Using Active Directory Access Control for Managing Relationships, Home Realm Discovery and token normalization
Demo
Serv
er
2 S
erv
er
Active Directory Access Control
Active Directory Access Control
ADFS2 . WS-Federation
Your ApplicationIdentity Providers
Bro
wse
r-b
ase
d
Ric
hC
lien
tWS-Federation
SAML
SWT
SAML
SWT
Service Identities
ADFS2 . WS-Trust
WS-Trust
OAuth WRAP/2.0
Authenticating Users from Web and Social Providers
Sign-up and claims enrichment
Windows Azure
FabrikamShipping: Automating Customer Sign-up from Social Providers via Active Directory Access Control
Demo
More Scenarios
[Almost] the Same Applies to Web ServicesNative WCF Integration for WS-Trust/WS-SecuritySome gimmicks necessary in Silverlight
Custom WIF extensions for handling REST/OAuth
Variations of protocol transition patterns for handling mobile scenarios
Claims Will Get the Job Done
© 2011 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to
be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.