Channel 9 - Entries tagged with WIF Microsoft http://mschnlnine.vo.llnwd.net/d1/Dev/App_Themes/C9/images/feedimage.png Channel 9 - Entries tagged with WIF http://channel9.msdn.com/Tags/wif Channel 9 keeps you up to date with the latest news and behind the scenes info from Microsoft that developers love to keep up with. From LINQ to SilverLight – Watch videos and hear about all the cool technologies coming and the people behind them. http://channel9.msdn.com/Tags/wif en Sat, 25 May 2013 02:27:41 GMT Sat, 25 May 2013 02:27:41 GMT Rev9 13 1 25 Bytes by MSDN: Vittorio Bertocci and Brian Prince discuss Windows Identity Foundation (WIF) and Access Control Service (ACS) Join this conversation on Windows Identity Foundation (WIF) and Access Control Service (ACS) with two Microsoft Evangelists, Vittorio Bertocci and Brian Prince. WIF enables .NET developers to externalize identity logic from their application, improving developer productivity, enhancing application security, and enabling interoperability. ACS allows you to integrate single sign on (SSO) and centralized authorization into your web applications. Brian ties together how ACS integrates with WIF and Vittorio reveals a "sweet deal" on how to access this cloud service for free through the end of the year.

About Vittorio Bertocci

Vittorio Bertocci is a Principal Architect Evangelist in DPE and a key member of the extended engineering team that produces Microsoft's claims-based platform components (Windows Identity Foundation, ADFS 2.0, ACS). He is responsible for identity evangelism for the developer community and drove initiatives such as the Identity Developer Training Kit and the IdElement show. He is the author of "Programming Windows Identity Foundation" (MSPress, 2010), co-author of the "Guide to Claims Based Identity and Access Control" (MSPress, 2010) and lead author of "Understanding Windows CardSpace" (Addison-Wesley, 2008), and a prominent authority/blogger on the Windows Azure platform. Vittorio holds a Master's degree in computer science, and is a regular speaker at PDC, Tech•Ed and many other industry conferences.

 

About Brian Prince

Expect Brian Prince to get (in his own words) "super excited" whenever he talks about technology, especially cloud computing, patterns, and practices. That's a good thing, given that his job is to help customers strategically leverage Microsoft technologies and take their architecture to new heights. Brian's the co-founder of the non-profit organization CodeMash (www.codemash.org), runs the global Windows Azure Boot Camp program, and speaks at various regional and international events. Armed with a Bachelor of Arts degree in computer science and physics from Capital University in Columbus, Ohio, Brian is a zealous gamer with a special weakness for Fallout 3.
Brian is the co-author of "Azure in Action", published by Manning Press.

Vittorio Bertocci and Brian Prince recommend you check out

]]> http://channel9.msdn.com/Blogs/Bytes+by+MSDN/Bytes-by-MSDN-Vittorio-Bertocci-and-Brian-Prince-discuss-Windows-Identity-Foundation-WIF-and-Access- Join this conversation on Windows Identity Foundation (WIF) and Access Control Service (ACS) with two Microsoft Evangelists, Vittorio Bertocci and Brian Prince. WIF enables .NET developers to externalize identity logic from their application, improving developer productivity, enhancing application security, and enabling interoperability. ACS allows you to integrate single sign on (SSO) and centralized authorization into your web applications. Brian ties together how ACS integrates with WIF and Vittorio reveals a "sweet deal" on how to access this cloud service for free through the end of the year. About Vittorio BertocciVittorio Bertocci is a Principal Architect Evangelist in DPE and a key member of the extended engineering team that produces Microsoft's claims-based platform components (Windows Identity Foundation, ADFS 2.0, ACS). He is responsible for identity evangelism for the developer community and drove initiatives such as the Identity Developer Training Kit and the IdElement show. He is the author of "Programming Windows Identity Foundation" (MSPress, 2010), co-author of the "Guide to Claims Based Identity and Access Control" (MSPress, 2010) and lead author of "Understanding Windows CardSpace" (Addison-Wesley, 2008), and a prominent authority/blogger on the Windows Azure platform. Vittorio holds a Master's degree in computer science, and is a regular speaker at PDC, Tech•Ed and many other industry conferences.   About Brian PrinceExpect Brian Prince to get (in his own words) "super excited" whenever he talks about technology, especially cloud computing, patterns, and practices. That's a good thing, given that his job is to help customers strategically leverage Microsoft technologies and take their architecture to new heights. Brian's the co-founder of the non-profit organization CodeMash (www.codemash.org), runs the global Windows Azure Boot Camp program, and speaks at various regional and international 373 http://channel9.msdn.com/Blogs/Bytes+by+MSDN/Bytes-by-MSDN-Vittorio-Bertocci-and-Brian-Prince-discuss-Windows-Identity-Foundation-WIF-and-Access- Thu, 02 Jun 2011 17:50:00 GMT http://channel9.msdn.com/Blogs/Bytes+by+MSDN/Bytes-by-MSDN-Vittorio-Bertocci-and-Brian-Prince-discuss-Windows-Identity-Foundation-WIF-and-Access- Bytes by MSDN Bytes by MSDN 0 http://channel9.msdn.com/Blogs/Bytes+by+MSDN/Bytes-by-MSDN-Vittorio-Bertocci-and-Brian-Prince-discuss-Windows-Identity-Foundation-WIF-and-Access-/RSS ACS Brian Prince Bytes by MSDN WIF WIF Workshop 10: Lab about WIF and Windows Azure
]]> http://channel9.msdn.com/Shows/Identity/WIF-Workshop-10-Lab-about-WIF-and-Windows-Azure The last lab of the workshop covers the use of WIF on Windows Azure, demonstrating in practice how to cope with NLB sessions, volatile application URI, dynamic configuration, metadata generation, tracing and so on. Labs from the Identity Developer Training Kit 292 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-10-Lab-about-WIF-and-Windows-Azure Wed, 23 Jun 2010 13:47:00 GMT http://channel9.msdn.com/Shows/Identity/WIF-Workshop-10-Lab-about-WIF-and-Windows-Azure Vittorio Bertocci Vittorio Bertocci 0 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-10-Lab-about-WIF-and-Windows-Azure/RSS IdElement Identity Identity Access WIF WIF Workshop Windows Identity Foundation WIF Workshop 9: WIF and Windows Azure ]]> http://channel9.msdn.com/Shows/Identity/WIF-Workshop-9-WIF-and-Windows-Azure The last session of the training covers the use of WIF in Windows Azure. After a quick introduction to Windows Azure and the infrastructural differences between web roles and on-premises deployment, the session provides practical advices on aspects of distributed development such as handling NLB sessions, certificate management, dealing with volatile application URI, handling tracing, metadata generation considerations, and so on. The discussion covers both Web roles and WCF roles. 4473 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-9-WIF-and-Windows-Azure Wed, 23 Jun 2010 13:47:00 GMT http://channel9.msdn.com/Shows/Identity/WIF-Workshop-9-WIF-and-Windows-Azure Vittorio Bertocci Vittorio Bertocci 0 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-9-WIF-and-Windows-Azure/RSS IdElement Identity Identity Access WIF WIF Workshop Windows Identity Foundation WIF Workshop 8: Lab about WIF and WCF The first exercise of the WCF lab does not use an STS for authentication. It uses username & password credentials, and is designed to highlight the differences between the old WCF-only model and the enhanced model offered by WIF.

]]> http://channel9.msdn.com/Shows/Identity/WIF-Workshop-8-Lab-about-WIF-and-WCF This lab explores the idea of delegated service call via ActAs tokens: the exercise from the Web sites lab shows how to do that from an ASP.NET to a WCF backend, while the one from the WCF lab focuses on flowing identity info through a chain of services calls.The first exercise of the WCF lab does not use an STS for authentication. It uses username & password credentials, and is designed to highlight the differences between the old WCF-only model and the enhanced model offered by WIF. Labs from the Identity Developer Training Kit 323 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-8-Lab-about-WIF-and-WCF Wed, 23 Jun 2010 13:47:00 GMT http://channel9.msdn.com/Shows/Identity/WIF-Workshop-8-Lab-about-WIF-and-WCF Vittorio Bertocci Vittorio Bertocci 0 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-8-Lab-about-WIF-and-WCF/RSS IdElement Identity Identity Access WIF WIF Workshop Windows Identity Foundation WIF Workshop 7: WIF and WCF The WIF object model and WCF integration are discussed, with special attention to similarities to what has been seen for the ASP.NET case and differences with the traditional, WCF-only programming model.
The notion of trusted subsystem is explored at lenght, providing the backdrop for the introduction to WSTrustChannel, CreateChannelActingAs and CreateChannelWithIssuedToken. ]]> http://channel9.msdn.com/Shows/Identity/WIF-Workshop-7-WIF-and-WCF This session describes in detail the difference between passive and active scenarios, specifically around the confirmation method for toekns (bearer vs. holder-of-key).The WIF object model and WCF integration are discussed, with special attention to similarities to what has been seen for the ASP.NET case and differences with the traditional, WCF-only programming model.The notion of trusted subsystem is explored at lenght, providing the backdrop for the introduction to WSTrustChannel, CreateChannelActingAs and CreateChannelWithIssuedToken. 4832 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-7-WIF-and-WCF Wed, 23 Jun 2010 13:47:00 GMT http://channel9.msdn.com/Shows/Identity/WIF-Workshop-7-WIF-and-WCF Vittorio Bertocci Vittorio Bertocci 5 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-7-WIF-and-WCF/RSS IdElement Identity Identity Access WIF WIF Workshop Windows Identity Foundation WIF Workshop 6: WIF ASP.NET Pipeline and Extensibility Points After a general intro to the WIF configuration element, the session describes how WS-Federation is used for driving the various browser redirects which ultimately constitute the sign in experience. Most of the time is spent digging deep in how WIF leverages the ASP.NET HttpModule extensibility mechanism and its own classes & events for implementing the sign-in sequence. ]]> http://channel9.msdn.com/Shows/Identity/WIF-Workshop-6-WIF-ASPNET-Pipeline-and-Extensibility-Points This session explores in depth how WIF tackles the sign-in scenario.After a general intro to the WIF configuration element, the session describes how WS-Federation is used for driving the various browser redirects which ultimately constitute the sign in experience. Most of the time is spent digging deep in how WIF leverages the ASP.NET HttpModule extensibility mechanism and its own classes & events for implementing the sign-in sequence. 4477 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-6-WIF-ASPNET-Pipeline-and-Extensibility-Points Wed, 23 Jun 2010 13:47:00 GMT http://channel9.msdn.com/Shows/Identity/WIF-Workshop-6-WIF-ASPNET-Pipeline-and-Extensibility-Points Vittorio Bertocci Vittorio Bertocci 0 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-6-WIF-ASPNET-Pipeline-and-Extensibility-Points/RSS IdElement Identity Identity Access WIF WIF Workshop Windows Identity Foundation WIF Workshop 5: Lab about Web Sites and STS Another lab shows how to use an existing membership store for authenticating calls to a custom STS and sourcing claim values.

]]> http://channel9.msdn.com/Shows/Identity/WIF-Workshop-5-Lab-about-Web-Sites-and-STS The second lab of the workshop explores some of the patterns discussed in the former section. One lab demonstrates how a generic web site can be enhanced with identity provider capabilities regardless of the authentication technology it uses, simply by adding an STS page. Another lab shows how to use an existing membership store for authenticating calls to a custom STS and sourcing claim values. Labs from the Identity Developer Training Kit 228 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-5-Lab-about-Web-Sites-and-STS Wed, 23 Jun 2010 13:47:00 GMT http://channel9.msdn.com/Shows/Identity/WIF-Workshop-5-Lab-about-Web-Sites-and-STS Vittorio Bertocci Vittorio Bertocci 1 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-5-Lab-about-Web-Sites-and-STS/RSS IdElement Identity Identity Access WIF WIF Workshop Windows Identity Foundation WIF Workshop 4: Scenarios and Architecture II ]]> http://channel9.msdn.com/Shows/Identity/WIF-Workshop-4-Scenarios-and-Architecture-II This short session explores the architectural implications of using claims for authorization purposes 740 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-4-Scenarios-and-Architecture-II Wed, 23 Jun 2010 13:46:00 GMT http://channel9.msdn.com/Shows/Identity/WIF-Workshop-4-Scenarios-and-Architecture-II Vittorio Bertocci Vittorio Bertocci 0 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-4-Scenarios-and-Architecture-II/RSS IdElement Identity Identity Access WIF WIF Workshop Windows Identity Foundation WIF Workshop 3: Scenarios and Architecture I ]]> http://channel9.msdn.com/Shows/Identity/WIF-Workshop-3-Scenarios-and-Architecture-I In this session you will learn about the difference between IP-STS and FP-STS and how to choose where to put STSes in your architecture. You will learn about federation, home realm discovery and how to leverage the WIF extensibility model in order to handle multiple identity providers. 4442 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-3-Scenarios-and-Architecture-I Wed, 23 Jun 2010 13:46:00 GMT http://channel9.msdn.com/Shows/Identity/WIF-Workshop-3-Scenarios-and-Architecture-I Vittorio Bertocci Vittorio Bertocci 0 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-3-Scenarios-and-Architecture-I/RSS IdElement Identity Identity Access WIF WIF Workshop Windows Identity Foundation WIF Workshop 2: Lab on Basic Web Sites This video introduces the viewer to the lab format and gives some advices about lab execution.

]]> http://channel9.msdn.com/Shows/Identity/WIF-Workshop-2-Lab-on-Basic-Web-Sites The first lab of the workshop offers an overview of what can be achieved when using WIF with Web sites: authentication externalization, integration with IsInRole and ASP.NET authorization, customization of the application via claims, claims-based authorization.This video introduces the viewer to the lab format and gives some advices about lab execution. Labs from the Identity Developer Training Kit 369 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-2-Lab-on-Basic-Web-Sites Wed, 23 Jun 2010 13:46:00 GMT http://channel9.msdn.com/Shows/Identity/WIF-Workshop-2-Lab-on-Basic-Web-Sites Vittorio Bertocci Vittorio Bertocci 3 http://channel9.msdn.com/Shows/Identity/WIF-Workshop-2-Lab-on-Basic-Web-Sites/RSS IdElement Identity Identity Access WIF WIF Workshop Windows Identity Foundation Get a whiff of WIF! by Keith Brown The Windows Identity Foundation (WIF) makes it easy for web applications and services to use the modern, claims-based model of identity. This model allows you to factor authentication and many authorization decisions out of your applications and into a central identity service. This model makes it much easier to achieve Internet-friendly single sign on. It also makes it easier for your application to receive richer identity information, and paves the way for identity federation, should you ever need to integrate with another organization or another platform (Java, for example).

62fb4e66-1b96-43e8-b5ce-8642c96afdf8[1]

 

This session is presented by Keith Brown during Microsoft DevDays 2010 in The Hague in The Netherlands.

]]> http://channel9.msdn.com/Blogs/matthijs/Get-a-whiff-of-WIF-by-Keith-Brown The Windows Identity Foundation (WIF) makes it easy for web applications and services to use the modern, claims-based model of identity. This model allows you to factor authentication and many authorization decisions out of your applications and into a central identity service. This model makes it much easier to achieve Internet-friendly single sign on. It also makes it easier for your application to receive richer identity information, and paves the way for identity federation, should you ever need to integrate with another organization or another platform (Java, for example).   This session is presented by Keith Brown during Microsoft DevDays 2010 in The Hague in The Netherlands. 4597 http://channel9.msdn.com/Blogs/matthijs/Get-a-whiff-of-WIF-by-Keith-Brown Wed, 14 Apr 2010 06:14:00 GMT http://channel9.msdn.com/Blogs/matthijs/Get-a-whiff-of-WIF-by-Keith-Brown Matthijs Hoekstra Matthijs Hoekstra 0 http://channel9.msdn.com/Blogs/matthijs/Get-a-whiff-of-WIF-by-Keith-Brown/RSS DevDays 2010 NL Keith Brown Netherlands WIF Fabrikam Jets - Integrating Codename "Dallas" with AppFabric Access Control AppFabric Access Control (AC) can be used to provide identity federation, trust delegation, service authorization and integration with Active Directory Federation Services (ADFS), to control access to services based on Windows Azure.

In the demo, Fabrikam Jets uses the Dallas Portal, AC and ADFS to grant employees of Contoso Marketing access to Microsoft Codename "Dallas" at Fabrikam's expense, using Windows authentication, without exposing Fabrikam's Dallas account keys. It also shows how Fabrikam can revoke the privilege later.

The source code for this example is now available soon on this MSDN Code Gallery page.

Note: The example has been updated to work with the V1 version of AppFabric Access Control. There were two changes from the CTP version to V1 that made the update necessary: 1) V1 uses version 0.9 of the WRAP protocol, instead of version 0.8, and 2) the issuer name generated by V1 is the base URI of the STS endpoint for the service namespace, instead of the full URI. The screen cast has not yet been updated, and still shows the user providing the full URI of the STS endpoint as the key description, rather than the base URI. In all other respects, however, it remains accurate. ]]> http://channel9.msdn.com/Blogs/JackGr/Fabrikam-Jets-Integrating-Codename-Dallas-with-AppFabric-Access-Control This screencast shows how AppFabric Access Control (AC) can be used to provide identity federation, trust delegation, service authorization and integration with Active Directory Federation Services (ADFS), to control access to services based on Windows Azure. In the demo, Fabrikam Jets uses the Dallas Portal, AC and ADFS to grant employees of Contoso Marketing access to Microsoft Codename "Dallas" at Fabrikam's expense, using Windows authentication, without exposing Fabrikam's Dallas account keys. It also shows how Fabrikam can revoke the privilege later. The source code for this example is now available soon on this MSDN Code Gallery page. Note: The example has been updated to work with the V1 version of AppFabric Access Control. There were two changes from the CTP version to V1 that made the update necessary: 1) V1 uses version 0.9 of the WRAP protocol, instead of version 0.8, and 2) the issuer name generated by V1 is the base URI of the STS endpoint for the service namespace, instead of the full URI. The screen cast has not yet been updated, and still shows the user providing the full URI of the STS endpoint as the key description, rather than the base URI. In all other respects, however, it remains accurate. 364 http://channel9.msdn.com/Blogs/JackGr/Fabrikam-Jets-Integrating-Codename-Dallas-with-AppFabric-Access-Control Thu, 03 Dec 2009 21:13:00 GMT http://channel9.msdn.com/Blogs/JackGr/Fabrikam-Jets-Integrating-Codename-Dallas-with-AppFabric-Access-Control Jack Greenfield Jack Greenfield 2 http://channel9.msdn.com/Blogs/JackGr/Fabrikam-Jets-Integrating-Codename-Dallas-with-AppFabric-Access-Control/RSS .NET Framework 3.5 .Net Services Access Access Control Active Directory ActiveDirectory AppFabric ASP.NET Authentication Azure C# claims Dallas Federated Security Header HTTP Identity REST SAML Sample Samples Security SQL Azure SWT Token Authentication Video Videos Visual Studio 2008 Web Services WIF Windows Forms WPF WRAP WS-Federation WS-Trust Jorgen Thelin on the Microsoft Federation Gateway Jorgen Thelin, Senior Program Manager, looks after key identity services in Microsoft such as Windows Live ID and the Microsoft Federation Gateway (MFG).
In today's interview Jorgen describes the role of MFG, and touches on the many wonders it enables: using AD accounts to SSO (single sign on) access to Microsoft Business Online Services such as Dynamics CRM, allowing the 550 million owners of a Live ID account to gain access to your federated applications developed with Windows Identity Foundation, and much more.
Jorgen also takes the chance to tell the story of the Microsoft Services Connector (MSC), from its inception to the decision of consolidating its functionalities in Active Directory Federation Services 2.0 (see the Microsoft Online Service Federation Utility preview).
Finally, Jorgen gives us a taste of the future of MFG: non-AD directories, SAML2.0 protocol and the new scenarios that those exciting features will enable.
 
URL references:
The Microsoft Federation Gateway on MSDN
Jorgen's blog
The Identity key topic on Channel 9 ]]> http://channel9.msdn.com/Shows/Identity/Jorgen-Thelin-on-the-Microsoft-Federation-Gateway Jorgen Thelin, Senior Program Manager, looks after key identity services in Microsoft such as Windows Live ID and the Microsoft Federation Gateway (MFG). In today's interview Jorgen describes the role of MFG, and touches on the many wonders it enables: using AD accounts to SSO (single sign on) access to Microsoft Business Online Services such as Dynamics CRM, allowing the 550 million owners of a Live ID account to gain access to your federated applications developed with Windows Identity Foundation, and much more. Jorgen also takes the chance to tell the story of the Microsoft Services Connector (MSC), from its inception to the decision of consolidating its functionalities in Active Directory Federation Services 2.0 (see the Microsoft Online Service Federation Utility preview). Finally, Jorgen gives us a taste of the future of MFG: non-AD directories, SAML2.0 protocol and the new scenarios that those exciting features will enable.   URL references: The Microsoft Federation Gateway on MSDN Jorgen's blog The Identity key topic on Channel 9 1761 http://channel9.msdn.com/Shows/Identity/Jorgen-Thelin-on-the-Microsoft-Federation-Gateway Fri, 28 Aug 2009 20:52:00 GMT http://channel9.msdn.com/Shows/Identity/Jorgen-Thelin-on-the-Microsoft-Federation-Gateway Vittorio Bertocci Vittorio Bertocci 3 http://channel9.msdn.com/Shows/Identity/Jorgen-Thelin-on-the-Microsoft-Federation-Gateway/RSS Active Directory Active Directory Federation Services 2.0 ADFS ADFS 2.0 Geneva Geneva Framework Geneva Server IdElement MFG Microsoft Federation Gateway WIF Windows Identity Foundation