Monthly Archives: February 2008

As part of LeastPrivilege.IdentityModel I wrote a claim set derived class that you can use to create your own custom claim sets. The DeferredLoadClaimSet lazily loads the claims (which potentially involves roundtrips to data stores) on demand when the claims … Continue reading →

In System.IdentityModel.Claims you can find two more specialized claim sets for Windows accounts and X509 certificates called WindowsClaimSet and X509CertificateClaimSet respectively. WCF uses these classes to create claim sets for Windows/certificate clients. But you can also use them “standalone”. The … Continue reading →

The following code is useful for inspecting the contents of claim sets:   public static void ShowClaims(IEnumerable<ClaimSet> claimSets){    int count = 0;    foreach (ClaimSet set in claimSets)    {        Heading(String.Format(“Claim Set #{0}”, ++count), ConsoleColor.Yellow);        ShowClaimSet(set, false);    }} private static void ShowClaimSet(ClaimSet … Continue reading →

In the previous post I talked about claims, what they are and how to create them. Usually a claim doesn’t come on its own – but is grouped into a claim set. To create a claim set you either derive … Continue reading →

Michael (a reader) recently wrote: “You posted on your blog that System.IdentityModel is not tied to WCF…I understand how the claims, rights, and resources work. And I have created an Authorization Policy that implements IAuthorizationPolicy. But how do I make … Continue reading →