Category Archives: .NET Security

Web API Security: JSON Web Token/OAuth2 with Thinktecture.IdentityModel AuthenticationHandler

Posted on April 29, 2013 by

(OK – I only included OAuth2 in the title to get your attention – this applies to whatever framework or technology you use to work with JSON web tokens aka JWTs) Following the pattern from my two previous posts, you … Continue reading →

Posted in .NET Security, IdentityModel, IdentityServer, OAuth, WebAPI | 1 Comment

Annual Identity Update on DotNetRocks

Posted on April 16, 2013 by

It’s this time of the year again! http://www.dotnetrocks.com/default.aspx?ShowNum=863 “Dominick Baier returns to talk to Carl and Richard about the current state of security in .NET 4.5. Dom starts out talking about how WebAPI has impacted the development of web services … Continue reading →

Posted in .NET Security, ASP.NET, Azure, IdentityModel, IdentityServer, OAuth, WCF, WebAPI | 1 Comment

Authentication vs Authorization

Posted on April 16, 2013 by

…in the context of token-based security systems. There are many practical and philosophical ways to discuss the difference between the two terms. But since there is quite some confusion, I want to look at it from the perspective of the … Continue reading →

Posted in .NET Security, IdentityModel, IdentityServer, OAuth, WebAPI | 2 Comments

Claims-based Identity & Access Control Pre-Conference Workshop at NDC 2013

Posted on February 13, 2013 by

This is great news! If you are going to NDC, you can take my identity & access control training as a pre-conference workshop. I have divided the content in a “web apps” day and a “services & the cloud” day. This … Continue reading →

Posted in .NET Security, ASP.NET, Azure, Conferences & Training, IdentityModel, IdentityServer, OAuth, WCF, WebAPI | Leave a comment

Claims-based Identity & Access Control Training in February

Posted on January 30, 2013 by

I just got email confirming the February run of the “identity course” in Oslo. great! There are seats left and you can book here. Cu!  

Posted in .NET Security, ASP.NET, Azure, IdentityModel, IdentityServer, OAuth, WCF, WebAPI | Leave a comment

Thinktecture IdentityServer v2 RTM

Posted on December 28, 2012 by

Title says it all – I am glad we could get this done before the end of the year!! Besides bug fixes since the last beta version, we added two features: identity server core nuget package and profile editor. I … Continue reading →

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer, OAuth, WCF, WebAPI | Leave a comment

Thinktecture.IdentityModel Nuget Package hits 10K downloads

Posted on December 28, 2012 by

Thanks!

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer, WCF, WebAPI | Leave a comment

Azure Authentication Library

Posted on December 17, 2012 by

Azure Authentication Library (AAL) is slowly turning into a really useful “easy to use” library to write client code against Microsoft identity back-ends like Windows Azure Active Directory and Access Control Service (and hopefully ADFS too at some point). Very … Continue reading →

Posted in .NET Security, Azure, IdentityModel, WCF | Leave a comment

Identity & Access Control in .NET, ASP.NET and WCF 4.5

Posted on December 14, 2012 by

I just hit my first big milestone in the security curriculum for Pluralsight. All three base identity & access control courses are done and online now. They cover what used to be called WIF and is now part of .NET … Continue reading →

Posted in .NET Security, ASP.NET, Conferences & Training, IdentityModel, IdentityServer, WCF, WebAPI | 6 Comments

Progress on Thinktecture IdentityServer v2 (hopefully the last update ;)

Posted on December 9, 2012 by

We’ve been extremely busy with our days jobs in the last weeks – end of year madness. That means we did not have much time to work on IdSrv – but – all the reported bugs seem to be fixed … Continue reading →

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer, OAuth, WebAPI | Leave a comment