Welcome to Microsoft .NET Framework 3.0 Community (NetFx3)

The .NET Framework is Microsoft's managed code programming model for building applications that have visually stunning user experiences, seamless and secure communication, and the ability to model a range of business processes.

Learn More...

WCF Community Bloggers

Browse by Tags

All Tags » SAML   (RSS)

  • How Can I Help You With Your WCF/WF/Neuron/Messaging Needs Today?

    I mentioned that I was looking for new opportunitie s but I have decided to concentrate my independent Microsoft .NET consulting on all things Connected Systems and Messaging. I see many shops around the country struggling with WCF and WF. In this area, I have been a part of the WCF and WF SDRs for 4 years now since the beginning and part of the large 2-year WCF and WF effort at Algorithmics. I am available, on a consulting basis , to help you with your WCF, WF and BizTalk needs. In addition, I believe that WCF is too low-level and difficult for many shops that are pursuing Services and SOA beyond a few causal services. To that end, I am an authorized representative for Neuron ESB and it's place in accelerating your WCF and SOA efforts.  Using my 26 years in the industry, I can help you look at your Architecture and find ways to make it better. Not only that, but I can help ensure you are on the right path for Oslo. If you are interested, please respond here or email to managedcode44 AT hotmail. Please do not use that email for unrelated questions - that's what the comments and newsgroups are for. Technorati Tags: Sam Gentile , WCF , WF , BizTalk , Software Architecture , Neuron ESB , ESB , SOA Read More...
  • SAML and Federated Identity Part 2 - Identity Management

    Last time, I talked a bit about SAML and Federated Identity . It turns out this is a subset of a general area, an area commonly referred to as Identity Management . The issue is how to protect and manage credentials across a wide array of network applications that have different authentication methods and requirements. I talked about SSO last time, mostly around SSO in browsers and web applications. As Pablo reminded me , it's not just web browsers; SAML is trying to solve the problem of SSO in general so that the user can log in once for multiple applications. This is, of course, critical in Real-World services or SOA. All of this points to an effective identity management infrastructure. The Elements of an Identity Management System Such a solution would be made up of the following capabilities as services [1]: Identity Provisioning Services - Set up users easily; Provision users and roles typically in LDAP compliant sources; Policy definition and enforcement Identity Data Synchronization Services - This is all about synchronizing identity data across a wide range of heterogeneous apps, directories, databases and other stores Access Management Services - SSO access to apps and services across heterogeneous apps, Web Services and resources running on diverse platforms local or network Federation Services - This is one place where SAML comes in to provide a federated framework and authentication -sharing mechanism that is interoperable with existing systems Directory Services Read More...
  • SAML and Federated Identity 101 (Part 1)

    I am dealing with some tough SAML issues, with Michele's help, and I thought I would put in some review notes on SAML for other people to benefit as well. Reference for this material was the book: Securing Web Services with WS-Security.   Introduction In the past, there was no real need to share identities from one organization or company to another. This has changed quite a bit with SOA, Services and the Internet with increased collaboration across trust domains. The need for federation of security attributes has become critical. Some Definitions Identity - Individual or entity (machine) representing itself for consideration Subject - Entity asserting it's identity Credentials - created when a subject's identity initially established and verified in some trust domain by some 3rd party Portable - Credentials are portable when subject's identity verified in one trust domain and wants to assert and its identity and rights in another trust domain Assertions is a claim when some subject identity wants to do something. They may be challenged and proven. Authentication is an assertion that a subject is who they say they are Authorization is an assertion that the subject identity is allowed to do something Why SAML? XML and/or SOAP has no standardized and interoperable way to communicate two different entities in two different trust domains to communicate their security properties and establish trust. Security Assertion Markup Language  (SAML) is the XML standard Read More...

Copyright © 2007 Microsoft Corporation. All Rights Reserved. | Terms of Use | Privacy Statement | Contact Us