Scribd Logo
Upload

Welcome to Scribd!

  • APP Identity Security by Walter Wong

    Uploaded by

    Microsoft TechDays APAC
    125 views18 pages
    Walter Wong is presenting on Windows Identity Foundation. The presentation includes an introduction to WIF and the challenges of identity, demonstrations of linking an identity provider to a relying party and consuming claims, and using ASP.NET membership and Active Directory Federation Services as credential stores. WIF provides a claims-based programming model integrated with .NET identity APIs to simplify authentication, authorization, and customization across ASP.NET and WCF applications.

    Original Description:

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    Walter Wong is presenting on Windows Identity Foundation. The presentation includes an introduction to WIF and the challenges of identity, demonstrations of linking an identity provider to a relying party and consuming claims, and using ASP.NET membership and Active Directory Federation Services as credential stores. WIF provides a claims-based programming model integrated with .NET identity APIs to simplify authentication, authorization, and customization across ASP.NET and WCF applications.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    125 views18 pages

    APP Identity Security by Walter Wong

    Uploaded by

    Microsoft TechDays APAC
    Walter Wong is presenting on Windows Identity Foundation. The presentation includes an introduction to WIF and the challenges of identity, demonstrations of linking an identity provider to a relying party and consuming claims, and using ASP.NET membership and Active Directory Federation Services as credential stores. WIF provides a claims-based programming model integrated with .NET identity APIs to simplify authentication, authorization, and customization across ASP.NET and WCF applications.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 18

    Application: Whats your identity?

    Walter Wong MVP Developer Security walter_wws@hotmail.com

    Agenda
    Todays Identity Challenge Introduction to Windows Identity Foundation Implementation of WIF

    The Prisoner Model of Security


    Login.aspx Page1.aspx

    Credential Types / APIs

    Credential Stores

    User Attributes Stores

    What is the problem?


    Required great security knowledge Difficult to re-host

    Identity in Real Life

    ? ? !
    Gets user info from the document

    Externalizes Authentication

    Claims Can Set Application Free!


    Identity Provider

    ActiveToken Service Security Directory Federation Services 2.0


    Claims Security Token Relying Party

    Demo #1
    Link up Identity Provider And Relying Party

    Introducing WIF
    Windows Identity Foundation Essential claims programming model Claims Object Model integrated with the .NET identity API Single programming model for ASP.NET & WCF Config driven Single programming model for on-premises & cloud Tools for metadata-driven automatic app configuration WS-Federation, WS-Trust Framework for custom STS development

    Demo #2
    Consuming Claims

    ASP.Net Membership as Credential Store

    Demo #3
    ASP.Net Membership

    ADFS as Credential Store

    Demo #4
    ADFS

    Secure WCF Services

    Demo #5
    Secure WCF Services

    Conclusions
    Claims-base identity simplifies authentication, authorization and customization for your apps WIF makes easy for .NET developers to program with claims

    Thank You Q&A

    You might also like