Entries tagged with authentication - Channel 9

p&p Claims based Identity & Access Control Guide – Early drafts available

ajoy krishnamoorthy — Tue, 06 Oct 2009 02:56:00 GMT

A team led by Eugenio Pace at p&p has been busy working on the Claims based Identity and Access Control guide. We are thrilled to announce the availability of early drafts. Check out the CodePlex project site at http://claimsid.codeplex.com.

In this video, Eugenio Pace gives an overview of this project and the scenarios that are covered in this guide. This guide will introduce you to “claims-based” identity, a set of ideas and tools that may make it easier for you to build features like autorization, authentication and personalization into your apps in a more flexible way. In this guide, we’ll introduce some concepts that may sound new: claims, federated identity, and much more.

Quick Links:

Claims based Identity and Access Control Guide Project Site: http://claimsid.codeplex.com
Eugenio's Blog: http://blogs.msdn.com/eugeniop

Happy Reading!

Dynamics Duo: Everybody needs an Identity

Ben Riga — Tue, 16 Jun 2009 04:01:00 GMT

In yesterday’s episode we very briefly touched the identity and authentication part of the demo where, on the self-service site, the attendee registers using Windows Live ID. In this episode we go a lot deeper.

Identity and authentication is hard. Simple, scalable and secure login capabilities require a great deal of experience to build and a great deal of effort to maintain and keep running. Windows Live ID provides you a proven solution for building identity-aware applications and is used today by over 460 million users.

In our case, since we’ve integrated Live ID into the system, we let Microsoft manage all the details related to identity and authentication. Live ID assigns each of our users a token that is specific to our site. That means Microsoft lets us know that the person coming to the site is the same person that registered. That token is unique to our site so that from the perspective of the user their privacy is protected (e.g. they cannot be tracked across multiple web sites). In fact, the token is the only thing the site will see. So even though the user may use an email address and password to login to Live ID the site never sees that unless the user explicitly provides that information (as in our example by typing it into a profile page).

The simplicity of this is just amazing. As a developer I just have to register my site with Windows Live ID and then redirect my users to the Live ID login page whenever I need them to be authenticated. Live ID handles the authentication and then redirects back to a page that I’ve registered. You can even brand the Windows Live ID login page that your users will see so that it will appear as if it is your own login page. Nice!

While Windows Live ID does a great job of helping me as a conference organizer to identify and authenticate my conference attendees, we also need to authenticate the Windows Azure site to the Dynamics CRM site so that they can exchange information. We’re obviously not going to have CRM licenses for all our self-service users (the thousands of conference attendees in this case) so we use a certificate on the Windows Azure site to ensure that only that site has access to the CRM data. Once the certificate is on my Azure site, we use a Live ID service account to handle the authentication between the two servers.

This episode is part of a 5-part series. In this series we’ve tried to explain how you can combine the Microsoft Web Platform with Dynamics CRM to quickly build and deploy self-service solutions. The full set of videos include:

Both Girish and I enjoyed recording this series. We hope you enjoyed them as well. If you have comments or suggestions for other topics, feel free to add comments below or email Girish or me (Ben) directly.

Building your own MemberShipProvider in ASP.NET 2.0 and use it in SharePoint

BomBom — Thu, 24 Jul 2008 10:14:00 GMT

The last screencast (I think) from me about Authentication in SharePoint.
In this screencast I build a MemberShipProvider that is checking the users against an XML file instead of a SQL database ("using virtually no code at all").
I build it in ASP.NET 2.0, use it that site and then show you how easy it is to move it over to SharePoint.

This webcast builds on the previous ones, Forms Authentication with SharePoint (in English) and Authentication Provider .Net 2.0 Out Of The Box.

Yeah, I know the code speaks for itself, but this time I made it in english anyway.

Enjoy!