Entries for Vittorio Bertocci

Sharepoint 2010 and Claims-Based Identity

Vittorio Bertocci — Tue, 24 Nov 2009 22:18:00 GMT

When it comes to identity management intensive applications, it's hard to top Sharepoint. Whether you are signing in a portal, accessing a document or using a webpart for reaching out to external web services, your identity is going to be the factor that drives it all.
Vittorio went to visit Venky Veeraraghavan, Program Manager Lead in the Sharepoint team, to discuss how Sharepoint deals with identity challenges. Venky gives a fantastic explanation of how claims-based identity and Windows Identity Foundation helped the Sharepoint team to deliver on the identity functionalities they needed without getting entangled in low level details such as protocol handling.
Tune in!

Windows Identity Foundation Ships!

Vittorio Bertocci — Tue, 17 Nov 2009 18:23:00 GMT

The wait is over!
Today at our Professional Developer Conference Microsoft announced the availability of Windows Identity Foundation (WIF), a new extension to the .NET Framework that makes it easier for developers to create applications with open, identity-based access capabilities.
Vittorio interviewed Conrad Bayer, Director of Program Management for Identity and Access, to record his three-minutes take on the importance of this release.

Go get WIF while it's hot!

Federated Authentication in a Windows Azure Web Role Application [Federated Authentication in a Windows Azure Web Role Application]

Vittorio Bertocci — Tue, 17 Nov 2009 17:51:46 GMT

This hands-on lab provides step-by-step guides for hosting in Windows Azure (WAZ) a Web application accepting identities from an external identity provider: with the authentication functions being performed by an external identity provider, you are now free to focus on the business function of your application instead of worrying of low level details. As you will learn while you go though the lab, this is easily accomplished by taking advantage of Windows Identity Foundation (WIF), formerly known as Geneva, for enhancing your web site.

in reply to Federated Authentication in a Windows Azure Web Role Application

Enhancing an ASP.NET Membership Provider Website with Identity Provider Capabilities [Enhancing an ASP.NET Membership Provider Website with Identity Provider Capabilities]

Vittorio Bertocci — Tue, 17 Nov 2009 17:51:43 GMT

This lesson demonstrates how to add a simple STS to you ASP.NET membership provider-based website. By adding a simple page containing WIF code you will enable your partners to accept your users in their websites, even enabling Single Sign On for the users already logged in your website!

in reply to Enhancing an ASP.NET Membership Provider Website with Identity Provider Capabilities

Web Services and Identity [Web Services and Identity]

Vittorio Bertocci — Tue, 17 Nov 2009 17:51:42 GMT

This lab introduces you to the use of Windows Identity Foundation for securing WCF services. The claim object model offered by WIF is more integrated with the .NET identity object model than the one originally featured in WCF: the first exercise will help absolute beginners and WCF experts alike to familiarize with the new programming model. In the second exercise you will experience directly how easy it is to take advantage of existing identity providers for externalizing the authentication logic for your web service. The third exercise shows you how WIF addresses delegation. You will learn how to take advantage of Windows Identity Foundation for flowing the identity of your users across multiple services and application tiers, ensuring that the access privileges are always referring to the actual user access levels.

in reply to Web Services and Identity

Web Sites and Identity [Web Sites and Identity]

Vittorio Bertocci — Tue, 17 Nov 2009 17:51:39 GMT

The first exercise of the lab describes the most basic form of claims-based authentication for web sites, demonstrating how to take advantage of the integration between Windows Identity Foundation and Visual Studio. If you are interested in authorization, this lesson is for you: you will see how claims allow you to use the traditional ASP.NET role model, or to use sophisticated access rules (such as imposing an age limit to users) via claims. The second exercise you will take a peek inside a custom STS, discovering how claims are issued and how you can back an STS with arbitrary credentials and attributes stores. The third exercise is very short: you will experience firsthand how easy it is to take advantage of existing identity providers for externalizing the authentication logic for your website. How would you like to instantly grow your audience to more than 500 million users? The fourth exercise will show you how you can add Live Id to your list of trusted identity providers The fifth and final exercise of the lab is for expert developers. It shows you how you can avoid trusted subsystems without relying on sophisticated infrastructure. You will learn how to take advantage of Windows Identity Foundation for flowing the identity of your users across application tiers, ensuring that the access privileges are always referring to the actual user access levels.

in reply to Web Sites and Identity

An Introduction to Claims-Based Identity [An Introduction to Claims-Based Identity]

Vittorio Bertocci — Tue, 17 Nov 2009 17:51:38 GMT

Claims-based identity is a simple but powerful concept, which acts as guiding principle for all of Microsoft's identity products. In this short video Vittorio gives a concise introduction to claims-based identity. After reviewing some of the problems that developers encounter with traditional approaches to access management, you will see how claims-based identity simply defuses those issues by externalizing authentication and authorization. As you go through the hands-on lab of the identity course you will discover that all of the improvements in identity management can be traced back to the simple principle explained in this video.

in reply to An Introduction to Claims-Based Identity

Welcome To The Identity Training Course [Welcome To The Identity Training Course]

Vittorio Bertocci — Tue, 17 Nov 2009 17:51:38 GMT

Welcome to the Identity Training Course! In this video Vittorio Bertocci will introduce the Training Course format, how to take advantage of it and how it differs from other learning tools (like the IdElement show and the downloadable training kit) we offer to identity developers.

in reply to Welcome To The Identity Training Course

An Introduction to Claims-Based Identity [An Introduction to Claims-Based Identity]

Vittorio Bertocci — Tue, 17 Nov 2009 17:51:10 GMT

in reply to An Introduction to Claims-Based Identity

Federated Authentication in a Windows Azure Web Role Application [Federated Authentication in a Windows Azure Web Role Application]

Vittorio Bertocci — Tue, 17 Nov 2009 17:51:10 GMT

in reply to Federated Authentication in a Windows Azure Web Role Application

Windows Identity Foundation RC is here!

Vittorio Bertocci — Fri, 06 Nov 2009 18:05:00 GMT

The release candidate of Windows Identity Foundation is here! Chock-full of improvements driven by YOUR feedback, WIF RC gives a very good idea of how the final release will look like.
Vittorio went to visit Sidd, Govind and Sesha to learn about the new features and explore the rationale behind some of them. From a comprehensive list of new features to deep dives in their favourite scenarios, the guys tell it all. Tune in!

URL references:

WIF RC Announcement
Download the Windows Identity Foundation RC
The Identity key topic on Channel 9

Jorgen Thelin on the Microsoft Federation Gateway

Vittorio Bertocci — Fri, 28 Aug 2009 20:52:00 GMT

Jorgen Thelin, Senior Program Manager, looks after key identity services in Microsoft such as Windows Live ID and the Microsoft Federation Gateway (MFG).
In today's interview Jorgen describes the role of MFG, and touches on the many wonders it enables: using AD accounts to SSO (single sign on) access to Microsoft Business Online Services such as Dynamics CRM, allowing the 550 million owners of a Live ID account to gain access to your federated applications developed with Windows Identity Foundation, and much more.
Jorgen also takes the chance to tell the story of the Microsoft Services Connector (MSC), from its inception to the decision of consolidating its functionalities in Active Directory Federation Services 2.0 (see the Microsoft Online Service Federation Utility preview).
Finally, Jorgen gives us a taste of the future of MFG: non-AD directories, SAML2.0 protocol and the new scenarios that those exciting features will enable.

URL references:
The Microsoft Federation Gateway on MSDN
Jorgen's blog
The Identity key topic on Channel 9

Alex Weinert on Forefront Identity Manager 2010

Vittorio Bertocci — Sat, 27 Jun 2009 06:31:00 GMT

In this episode Alex Weinert, Group Program Manager, provides an in-depth interview around Identity Management in the enterprise. He begins with an overview of the current identity synchronization technologies on the Microsoft platform, MIIS and ILM 2007, and then pushes into a whiteboard session on the architecture and capabilities being built into the new Forefront Identity Manager (FIM) 2010 product (formerly known as Identity Lifecycle Manager (ILM) “2”). Built on .NET 3.5 technologies, FIM 2010 web services APIs provide the means for broad extensibility for the enterprise developer and ISV alike. And for the IT Pro, there’s rich codeless extensibility built into the product as well. You can download FIM 2010 RC0 from here for evaluation.

URL references:
Forefront Identity Manager 2010
The Identity key topic on Channel 9

Using claims for driving web sites... without writing any code

Vittorio Bertocci — Mon, 22 Jun 2009 07:28:00 GMT

Claims-based identity allows you to externalize authentication and authorization code, moving it out of your applications, so that you can focus on the functionalities you want to implement rather than worrying about plumbing details.
In this first IdElement screencast Vittorio shows you exactly that. We walk a mile in the shoes of a developer while is creating a web page: thanks to the Geneva Framework and a small sample ASP.NET control, the developer will be able to leverage identity information for driving the behavior of his page... without writing a single line of code and practicallywithout knowing anything about identity management ! You can try this yourself on your own machine by downloading the sample code on Code Gallery.

In the next screencasts we will go in more details and, walking you through the labs in the Identity Developer Training Kit, we will learn what happens under the hood: for today’s opening episode we wanted a scenario that shows what can be accomplished with claims, also to whom may not be familiar with identity management terminology.

URL References

ClaimsDrivenModifierControl sample
Identity Developer Training Kit
“Geneva” Forum on MSDN
"Geneva" Team Blog
Microsoft code name "Geneva"
The Identity key topic on Channel 9