Authentication in the cloud: Step by Step Felix Jorkowski Senior Developer, Planet Software AZR317.

Authentication in the cloud:Step by StepFelix JorkowskiSenior Developer, Planet Software

AZR317

Agenda

Components Of Authentication

Breaking Implicit TrustOAuth / Open ID

Federated AuthenticationWS-Federation / WS-Trust

Components of Authentication

Tokens

“A thing serving as a visible or tangible representation of something abstract”

User

Time

Cookie

Query

JSON

SOAP

Components of Authentication

Trust

Encryption

Explicit or Implicit

Extending trust using tokens

Trust

Breaking Implicit Trust

Identity Provider (IdP)

The User Store

Relying Party (RP)

Service for those Users

Breaking Implicit Trust

OAuth (2)

OpenID

Example: OAuth/OpenID

Client User Source (IdP)

Services

Server (RP)


Client

Server (RP)

User Source (IdP)

Services


OAuth Only!

Client

Server (RP)

User Source (IdP)

Services


Client

Server (RP)

User Source (IdP)

Services


OAuth Only!

Client

Server (RP)

User Source (IdP)

Services


Client

Server (RP)

User Source (IdP)

Services

demo

Forms -> OAuth/OpenID

Federated Authentication


Passive (WS-Federation)

Active (WS-Trust)


Claims

Passed in your tokens

Holds user’s name, email…

Endpoints

Only for WS-Trust

Lots of configurations!


Example: WS-Federation

Possible IdPsClient

Server (RP) WS-Federation Provider(IdP + RP)

Azure

ACS

GoogleWindows Live ID

Facebook

Yahoo

Your company (ADFS)

WS-Fed Provider

Example: WS-Federation


Facebook

Yahoo

Your company (ADFS)

WS-Fed Provider

Possible IdPsClient


Azure

ACS

Example: WS-Federation & WS-Trust


Facebook

Yahoo

Your company (ADFS)

WS-Fed Provider

Possible IdPsClient


Azure

ACS

demo

Forms -> WS-Federation

net.tcp -> WS-Trust

Thank you!

Projects available at: https://github.com/ajorkowski/techeddemos

Questions? Meet and Greet - Thursday 11-11:30 Speaker Lounge

Twitter: @felixinmelb

https://github.com/ajorkowski/techeddemos

https://github.com/ajorkowski/techeddemos

© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to

be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS

PRESENTATION.

Authentication in the cloud: Step by Step Felix Jorkowski Senior Developer, Planet Software AZR317.

Documents

Transcript of Authentication in the cloud: Step by Step Felix Jorkowski Senior Developer, Planet Software AZR317.