Windows Identity Foundation Patterns: On-Premise and Cloud
This course aims to demystify on-premise and cloud-based identity solutions.
What you'll learn
Dealing with multiple identities has always been challenging; even more so with the advent of the cloud. Developers and architects are often confused by the numerous terms, acronyms and buzzwords - such as Active/Passive Federation, SWT, SAML, ADFS, WIF, WS-Trust, WS-Federation, OAuth, OAuth WRAP and others. This course starts by distilling the technology jargon; setting the foundation for understanding various identity solutions. Having laid the foundation, this course then focuses on typical claims-based identity solution patterns within enterprises. Understanding these recurring implementation themes will further simply the mapping of claims-based identity to your LOB applications.
Table of contents
- Introduction 1m
- Course Objectives 2m
- Course Prerequisites 1m
- Challenges with Multiple Identities 5m
- Claims Based Authentication 3m
- Protocols and Token Formats - WSTrust, WSFederation, OAuth, SAML, OpenID, SWT, JWT 6m
- Windows Identity Foundation 6m
- Identity Providers and Active Diretory Federation Services 4m
- ADFS Lab Setup using Windows Azure Virtual Machine 12m
- Access Control Service - Federation Provider 7m
- ACS Portal Walkthrough 6m
- ADFS vs. ACS 2m
- Windows Azure Active Directory 3m
- Course Patterns 5m
- Summary 1m
- Introduction 1m
- Intent and Motivation 1m
- Motivation Example 1m
- Solution 2m
- Implementation 3m
- Creating WCF REST Service 5m
- Securing REST Service 3m
- Register REST Service as Relying Party with ACS 8m
- Add Client Project and Service Identity 5m
- Authentication with SWT Token 4m
- Moving from Authentication to Delegation 2m
- Establishing Delegation Trust via Service Identities 6m
- Delegation in Action 2m
- Consequences 1m
- Summary 1m
- Introduction 1m
- Intent and Motivation 1m
- Motivating Example 1m
- Solution 2m
- Implementation: Direct ADFS - Enterprise SSO 2m
- Setting up Relying Party with SSL 1m
- Adding ADFS as Identity Provider 2m
- Adding Relying Party to ADFS 3m
- Authentication using ADFS 1m
- Implementation: WS-Federation with Web Clients (ASP.NET WebForms, MVC) 1m
- Establishing Trust Between ADFS and ACS 8m
- Establishing Trust Between ACS and Relying Party 9m
- WS-Federation in Action 3m
- Implementation: WS-Federation with Rich Clients (WPF, WinForms, Windows Phone, Windows 8) 2m
- Creating XAML Client 3m
- Retrieve IdentityProviders using JavaScriptNotify Protocol 9m
- Handling Notify Event via InteropServices 5m
- Consequences 1m
- Summary 1m
- Introduction 1m
- Intent and Motivation 1m
- Motivation Example 1m
- Solution 1m
- Implementation: Token Transformation 3m
- SAML to SWT Token Conversion with ACS 9m
- Extending the ASP.NET WIF pipeline 4m
- ASP.NET in action with SWT 2m
- Implementation: Working with Rich Clients 1m
- Simulate WSTrustBinding for WIF 4.5 6m
- WSTrustChannelFactory with ADFS EndPoint 4m
- SAML to SWT Conversion using ACS OAuth WRAP EndPoint 5m
- Implementation: Claims Transformation 2m
- Claims Transformation and Augmentation 10m
- Chaining ACS Rules 7m
- ACS Intersection Rules 4m
- Consequences 1m
- Summary 1m
- Introduction 1m
- Intent And Motivation 1m
- Motivating Example 2m
- Solution 2m
- Implementation with VS.NET 2010 2m
- Establish trust between ACS and VS2010 Relying Party 7m
- Configure Cloud Service Project 2m
- Managing Multiple STS References - OnPremise and Cloud 5m
- Publish To Azure 6m
- Implementation: Securing Session Tokens 1m
- Certificate Managment and FedAuth Cookie Transforms 4m
- Adding Certificate to Azure Instances 2m
- Scaling on Azure 3m
- Implementation: Distributed Token Cache 2m
- Adding Azure Caching Preview Worker Role 4m
- Creating Distributed Token Cache 4m
- Final Run 3m
- Consequences 1m
- Summary 1m
About the author
Niraj works as an Enterprise Architect for a Fortune 500 company and has an innate passion for building / studying software systems. He is a top rated speaker at various technical forums including Tech Ed, MCT Summit, Developer Summit, and Virtual Tech Days, among others. He enjoys working on – IT innovations that impact enterprise’s bottom line, architecture and integration of systems, performance tuning, and review of enterprise applications. He has received MVP award for ASP.NET, Connec... more