Channel 9 - Entries tagged with Authentication

Microsoft DevRadio: (Part 6) Using Windows Azure to Build Back-End Services for Windows 8 Apps – Adding Authentication

Brian, G. Andrew Duthie, Peter Laudati, DevRadio, ChrisCaldwell — Wed, 08 May 2013 12:00:59 GMT

Like what you heard? Try Windows Azure for FREE and enjoy the freedom to use your preferred OS, language, database or tool. Windows Azure can help you deploy sites to a highly scalable environment, deploy and run virtual machines, and create highly scalable application in a rich PaaS environment. Give it a try!

_________________

Abstract:
In Part 6 of of their “Using Windows Azure to Build Back-End Services for Windows 8 apps” series Brian Hitney and Andrew Duthie explore the world of built-in support for authentication in Windows Azure Mobile Services. Tune in as they quickly demo for us the process of adding authentication for your mobile and Windows Store apps. Check out the full article here.

Watch Part 1 | Part 2 | Part 3 | Part 4 | Part 5

After watching this video, follow these next steps:

Step #1 – Try Windows Azure: No cost. No obligation. 90-Day FREE trial.
Step #2 – Download the Tools for Windows 8 App Development
Step #3 – Start building your own Apps for Windows 8

Subscribe to our podcast via iTunes or RSS

If you're interested in learning more about the products or solutions discussed in this episode, click on any of the below links for free, in-depth information:

Register for our Windows Azure Hands-on Lab Online (HOLO) events today!

Windows Azure Hands-on Labs Online

Blogs & Articles

Videos:

Virtual Labs:

MSDN Virtual Labs: Windows Azure

Windows Store app - Authenticate and Authorize users with Server Scripts in Windows Azure Mobile Services

Nick Harris — Tue, 18 Dec 2012 00:23:25 GMT

Authenticate users of your Windows Store apps using their Microsoft Account
Restrict access to insert/update/read and delete permissions on the tables within your Mobile service to authenticated users.
Add Server script to track which rows are inserted by authenticated users
Add Server script that authorizes users to only view data that they have inserted

Get started with 10 Mobile Services for FREE and try this scenario using the step-by-step tutorials tutorial part 1, tutorial part 2 or sample.

Follow @cloudnick

Windows Store app - Getting Started with Authentication in Windows Azure Mobile Services

Nick Harris — Tue, 18 Dec 2012 00:22:44 GMT

Windows Azure Mobile Services enables authentication scenarios with popular social identity providers such as Microsoft Account, Twitter, Facebook and Google. In this video Nick Harris demonstrates how you can authenticate users of your Windows Store apps using their Microsoft Account and then how you can restrict access to insert/update/read and delete permissions on the tables within your Mobile service to authenticated users.

Get started with 10 Mobile Services for FREE and try this scenario using the step-by-step tutorial or sample

Follow @cloudnick

Windows Identity Foundation with Vittorio Bertocci

Robert Hess — Tue, 31 Aug 2010 15:46:00 GMT

One of the thorns in the sides of all Internet users is the plethora of accounts they need to keep track of for the various websites they use throughout the day. Most of the folks running these sites don’t particularly want to create an account management system, but they need to just so they can provide their users with a personalized experience. On the other end of the spectrum, there are enterprise developers who need to constantly keep up with new protocols and credential types for securing their applications. Windows Identity Foundation might just be a solution to both of these problems, removing the need for applications to host their own authentication system, as well as reducing the number of logins a user needs to remember.

In this episode of The Knowledge Chamber, I meet with Vittorio Bertocci (who just finished a new book, Programming Windows Identity Foundation) to learn more about the basic features and capabilities of Windows Identity Foundation and see how easy it is for websites and applications to get out of the credential management game and “outsource” their authentication to another provider.

When used in conjunction with services such as the Windows Azure AppFabric Access Control Service, Windows Identity Foundation makes it possible to log in via LiveID, Yahoo, Google, and existing Active Directory instances equipped with ADFS2, as well as by using a variety of other providers, while maintaining the exact same codebase.

If you’d like to order a copy of Vittorio’s book, you can find it here:
http://www.amazon.com/gp/product/0735627185

To find out more about Windows Identity Foundation, you should start here:
http://www.Microsoft.com/WIF

You can find Vittorio’s blog here:
http://blogs.msdn.com/b/vbertocci/

And you can find more videos on Channel 9 about Windows Identity Foundation here:
http://channel9.msdn.com/tags/Windows+Identity+Foundation/

ARCast.TV - Sharp Dudes Discuss Silverlight Application Migration

Bob Familiar — Mon, 17 May 2010 14:39:00 GMT

Michael Bird and John Hidey at Sharp Dudes recently discussed with Zhiming Xue (Dr. "Z") their application migration experience moving from Silverlight 3 to Silverlight 4.

Using demos, they focused on discussing two common areas of a typical multitier web application - form or web page validation and user authentication and authorization.

Check it out and hear what they have to say about Silverlight migration and lessons they'd like to share with you.

Fabrikam Jets - Integrating Codename "Dallas" with AppFabric Access Control

Jack Greenfield — Thu, 03 Dec 2009 21:13:00 GMT

This screencast shows how AppFabric Access Control (AC) can be used to provide identity federation, trust delegation, service authorization and integration with Active Directory Federation Services (ADFS), to control access to services based on Windows Azure.

In the demo, Fabrikam Jets uses the Dallas Portal, AC and ADFS to grant employees of Contoso Marketing access to Microsoft Codename "Dallas" at Fabrikam's expense, using Windows authentication, without exposing Fabrikam's Dallas account keys. It also shows how Fabrikam can revoke the privilege later.

The source code for this example is now available soon on this MSDN Code Gallery page.

Note: The example has been updated to work with the V1 version of AppFabric Access Control. There were two changes from the CTP version to V1 that made the update necessary: 1) V1 uses version 0.9 of the WRAP protocol, instead of version 0.8, and 2) the issuer name generated by V1 is the base URI of the STS endpoint for the service namespace, instead of the full URI. The screen cast has not yet been updated, and still shows the user providing the full URI of the STS endpoint as the key description, rather than the base URI. In all other respects, however, it remains accurate.

p&p Claims based Identity & Access Control Guide – Early drafts available

ajoy krishnamoorthy — Tue, 06 Oct 2009 02:56:00 GMT

A team led by Eugenio Pace at p&p has been busy working on the Claims based Identity and Access Control guide. We are thrilled to announce the availability of early drafts. Check out the CodePlex project site at http://claimsid.codeplex.com.

In this video, Eugenio Pace gives an overview of this project and the scenarios that are covered in this guide. This guide will introduce you to “claims-based” identity, a set of ideas and tools that may make it easier for you to build features like autorization, authentication and personalization into your apps in a more flexible way. In this guide, we’ll introduce some concepts that may sound new: claims, federated identity, and much more.

Quick Links:

Claims based Identity and Access Control Guide Project Site: http://claimsid.codeplex.com
Eugenio's Blog: http://blogs.msdn.com/eugeniop

Happy Reading!

Dynamics Duo: Everybody needs an Identity

Ben Riga — Tue, 16 Jun 2009 04:01:00 GMT

In yesterday’s episode we very briefly touched the identity and authentication part of the demo where, on the self-service site, the attendee registers using Windows Live ID. In this episode we go a lot deeper.

Identity and authentication is hard. Simple, scalable and secure login capabilities require a great deal of experience to build and a great deal of effort to maintain and keep running. Windows Live ID provides you a proven solution for building identity-aware applications and is used today by over 460 million users.

In our case, since we’ve integrated Live ID into the system, we let Microsoft manage all the details related to identity and authentication. Live ID assigns each of our users a token that is specific to our site. That means Microsoft lets us know that the person coming to the site is the same person that registered. That token is unique to our site so that from the perspective of the user their privacy is protected (e.g. they cannot be tracked across multiple web sites). In fact, the token is the only thing the site will see. So even though the user may use an email address and password to login to Live ID the site never sees that unless the user explicitly provides that information (as in our example by typing it into a profile page).

The simplicity of this is just amazing. As a developer I just have to register my site with Windows Live ID and then redirect my users to the Live ID login page whenever I need them to be authenticated. Live ID handles the authentication and then redirects back to a page that I’ve registered. You can even brand the Windows Live ID login page that your users will see so that it will appear as if it is your own login page. Nice!

While Windows Live ID does a great job of helping me as a conference organizer to identify and authenticate my conference attendees, we also need to authenticate the Windows Azure site to the Dynamics CRM site so that they can exchange information. We’re obviously not going to have CRM licenses for all our self-service users (the thousands of conference attendees in this case) so we use a certificate on the Windows Azure site to ensure that only that site has access to the CRM data. Once the certificate is on my Azure site, we use a Live ID service account to handle the authentication between the two servers.

This episode is part of a 5-part series. In this series we’ve tried to explain how you can combine the Microsoft Web Platform with Dynamics CRM to quickly build and deploy self-service solutions. The full set of videos include:

Both Girish and I enjoyed recording this series. We hope you enjoyed them as well. If you have comments or suggestions for other topics, feel free to add comments below or email Girish or me (Ben) directly.