230 likes | 397 Views
Claims Based Identity. Scott Densmore Sr. Software Development Engineer Microsoft patterns & practices. About you (an assumption). You… are a developer know ASP.NET / MVC know C# c are about identity. Goals for this session. Learn about claims and terminology
E N D
Claims Based Identity Scott Densmore Sr. Software Development Engineer Microsoft patterns & practices
About you (an assumption) • You… • are a developer • know ASP.NET / MVC • know C# • care about identity
Goals for this session • Learn about claims and terminology • Claims enable an MVC application • Understand tools used to claims enable an application • WIF / WIF SDK • ACS 2.0
Relying Party (site) Identity Provider Browser GET Return HTML + Script GET configured IdP Return Home Realm Discovery Page Render HRD Login Issue Token Return IdP Token Return Resource + Session Cookie Validate Token
Browser Relying Party (site) Access Control Service Identity Provider GET Return HTML + Script Google, Yahoo!, LiveID, OpenID, Facebook, AD FS v2 GET feed of configured IdPs Return JSON array of configured IdPs Render IdPs (HRD) GET selected IdP Login Return IdP Token Issue ACS Token Return ACS Token SAML 1.1, 2.0, and SWT Return Resource + Session Cookie Validate ACS Token
DEMO Create a Claims Based Web Site
Resources • Claims Book • http://claimsid.codeplex.com • Windows Identity Foundation • http://msdn.microsoft.com/en-us/security/aa570351.aspx • Me • scottden@microsoft.com • @scottdensmore • http://scottdensmore.typepad.com
Questions? After the session please fulfil the questionnaire. Questionnaires will be sent to you by e-mail and will be available in the profile section of the NT Conference websitewww.ntk.si. Thank you!