-
Recent Posts
- Customizing IdentityServer
- ASP.NET Web API Authentication: Using multiple (simultaneous) Authentication Methods with Thinktecture AuthenticationHandler
- LeastPrivilege on Flipboard
- Support for X.509 Client Certificates in Thinktecture.IdentityModel for Web API
- Web API Security: JSON Web Token/OAuth2 with Thinktecture.IdentityModel AuthenticationHandler
Categories
- .NET Security (32)
- ASP.NET (89)
- Azure (26)
- Conferences & Training (27)
- IdentityModel (284)
- IdentityServer (77)
- OAuth (23)
- Photography (14)
- Resources (1)
- Uncategorized (549)
- WCF (104)
- WebAPI (78)
Tweets
- RT @richardblewett: Shindler’s Lifts http://t.co/SOWVG6munp 6 days ago
- Skógafoss tmblr.co/ZtWeVslF2fZL #iceland 1 week ago
Feed
Archives
- May 2013
- April 2013
- March 2013
- February 2013
- January 2013
- December 2012
- November 2012
- October 2012
- September 2012
- August 2012
- July 2012
- June 2012
- May 2012
- April 2012
- March 2012
- February 2012
- January 2012
- December 2011
- November 2011
- October 2011
- September 2011
- July 2011
- June 2011
- May 2011
- April 2011
- March 2011
- February 2011
- January 2011
- December 2010
- November 2010
- October 2010
- September 2010
- August 2010
- July 2010
- June 2010
- May 2010
- April 2010
- March 2010
- February 2010
- December 2009
- November 2009
- October 2009
- September 2009
- August 2009
- July 2009
- June 2009
- May 2009
- April 2009
- March 2009
- February 2009
- January 2009
- December 2008
- November 2008
- October 2008
- September 2008
- August 2008
- July 2008
- June 2008
- May 2008
- April 2008
- March 2008
- February 2008
- January 2008
- December 2007
- November 2007
- October 2007
- September 2007
- August 2007
- July 2007
- June 2007
- May 2007
- April 2007
- March 2007
- February 2007
- January 2007
- December 2006
- November 2006
- October 2006
- September 2006
- August 2006
- July 2006
- June 2006
- May 2006
- April 2006
- March 2006
- February 2006
- January 2006
- December 2005
- November 2005
- October 2005
- September 2005
- August 2005
- July 2005
- June 2005
- May 2005
- April 2005
- March 2005
- February 2005
- January 2005
- December 2004
- November 2004
- October 2004
- September 2004
- August 2004
- July 2004
- June 2004
- May 2004
Monthly Archives: September 2008
MSDN Article about WCF Service Authorization
Christian and I have written an article about the authorization infrastructure in WCF. It covers roles- and claims-based authorization and how to customize both. Enjoy. http://msdn.microsoft.com/en-us/magazine/cc948343.aspx(back online now – sorry for the confusion)
Posted in IdentityModel, WCF
Leave a comment
Certificate-backed InfoCards and Service Credential Negotiation
When trying to implement certificate backed managed InfoCards you might run into this slightly misleading error message: “There was a failure making a WS-Trust exchange with an external application. Could not retrieve token from identity provider. Inner Exception: SOAP security … Continue reading
Posted in IdentityModel
Leave a comment
ASP.NET Controls and Output Encoding
The last two days I did an ASP.NET security training for a customer. One discussion was how ASP.NET control handle (or don’t) output encoding – especially how inconsistent their behavior is. Five minutes ago I found this post by Alex … Continue reading
Posted in ASP.NET
Leave a comment
Zermatt: Source Code for FormsAuth STS
I got several requests to publish the full source of the FormsAuth STS I described here. Find it here. The setup is just like the passive STS/RP samples in the SDK. HTH
Posted in IdentityModel
Leave a comment
