Last time, I talked a bit about SAML and Federated Identity . It turns out this is a subset of a general area, an area commonly referred to as Identity Management . The issue is how to protect and manage credentials across a wide array of network applications that have different authentication methods and requirements. I talked about SSO last time, mostly around SSO in browsers and web applications. As Pablo reminded me , it's not just web browsers; SAML is trying to solve the problem of SSO

Yesterday's big announcement was just a start. We have an even bigger one, hopefully today. Meanwhile, my Neudesic East team celebrated our big 1st year in the East by going to the Tropicana in Atlantic City. We had 36 people, gosh I remember when there were only 6 people. WCF/ADFS/Federated Security Michele has been busy! She has created a proxy wrapper for WCF clients that illustrates how to swallow timeout exceptions and recreate channels automatically when there is an exception that faults

I am dealing with some tough SAML issues, with Michele's help, and I thought I would put in some review notes on SAML for other people to benefit as well. Reference for this material was the book: Securing Web Services with WS-Security.   Introduction In the past, there was no real need to share identities from one organization or company to another. This has changed quite a bit with SOA, Services and the Internet with increased collaboration across trust domains. The need for federation