Browse by Tags
All Tags »
WIF (
RSS)
Visual Studio has an Identity and Access tool extension which enables simple integration of claim based identity authentication into a web project (WCF and ASP.Net) It turns out that the tool depends on Windows Identity Framework (WIF) 4.5 which was integrated into the .Net framework and is not compatible with WIF 4.0. For .Net 4.5 only applications you will see the following when you right click the project. “ Enable Windows Azure Authentication ” integrate your project with Windows Azure Active...
If you will try to install WIF SDK on a windows 8 with visual studio 2012 and then create a simple claim based application, you will see that “Add STS reference” is gone. So How do we use federation in visual studio 2012 and .net 4.5? Well it turns out that WIF as we know it is deprecated because it was integrated in the core of .Net 4.5 and the SDK is now provided as a set of powerful tools integrated into Visual Studio. The tools includes built-in local sts for testing, Great integration with ACS...
I wrote a simple example for demonstrating delegation with Windows Identity Framework (WIF). I created a simple web site that used a simple custom STS for authentication. The web site called another web service to calculate a simple calculation (calculator). The web site used passive federation using a simple asp.net STS. SOAP Web service in general can only use passive federation for authentication, so I created another WCF custom STS. The idea was that the web application will obtain an act-as...
In Claim based applications we use token to provide the application (Relying party) with details (a collection of claims) about the the authenticated identity. In ASP.net web sites and WCF SOAP services SAML tokens are used as a container for the claims. SAML is a standard that describe how token and claims are constructed and how they are cryptographically protected using digital signature and encryption. SAML tokens are powerful yet they are large. The size of the token is not a real issue in ASP...
My friend Alik Levin who works in the identity group pointed me to a list videos containing detailed demos of the Access Control Service. WCF web service that uses ACS with WIF. Securing WCF Services with ACS Web site that uses ACS (with and without WIF) Securing Web Applications with ACS Delegation with ACS. Code Sample: OAuth 2.0 Delegation Integration with ADFS 2.0 How To: Configure AD FS 2.0 as an Identity Provider Integration with OpenID How To: Use Management Service to Configure an OpenID...
I wrote a lot about claim based Identity and access control. One of the big challenges in claim based access control is the creation of the STS. Fortunately the Azure platform has an offering in this domain – ACS AppFabric ACS Access Control Service implements a full STS in the cloud. It is simple yet powerful. The team created great videos explaining ACS and their integration with WIF. Watch and start using ACS. Manu
I upgraded my Visual Studio 2010 and installed the new SP1, but then I found that "Add STS Reference" is gone. The add-in is in place but it does not work. It took me some time to find the solution: Run the command: devenv /ResetAddin Microsoft.IdentityModel.Tools.VS.VSAddin.FederationAddin Now everything is back to normal. Hope this will help. Manu
Claim based identity is the future of identity management. It is simple, powerful and extensible but the most important reason to use it is the fact that it delegates identity management out of the application. WIF is Microsoft's infrastructure for using Claim Based Identity. (Similar to what is WCF for networking) Recently an excellent Training Kit was released about WIF and the integration of WIF with AppFabric Azure ACS. I strongly recommend to download read and learn. Manu