Monthly Archives: July 2008

WCF Claims to "Zermatt" Claims Migration Story

Hey – that’s a short post – there is none. thanks. bye… OK hold on – some background info. Microsoft introduced their new claims API with .NET 3.0 as part of the System.IdentityModel assembly (with super tight integration into WCF). … Continue reading

Posted in IdentityModel | Leave a comment

Try "Zermatt" and give Feedback

The last week I spent some time exploring parts of the “Zermatt” framework – some things are really cool – some I have mixed feelings about. The team is still in a quite early stage where design decisions and directions … Continue reading

Posted in IdentityModel | Leave a comment

CLR Security Site on Codeplex

The CLR security team has a site now on Codeplex – Shawn has all the details here. Good stuff!

Posted in Uncategorized | Leave a comment

Skiing in "Zermatt"

Today, Microsoft finally announced the first public version of their .NET identity framework code named “Zermatt”. The most important things you get from this framework are: APIs for the token/claims related heavy crypto lifting Supporting classes for claims aware applications … Continue reading

Posted in IdentityModel | Leave a comment

Using IdentityModel: Useful Extension Methods for Serializing Claim Sets

As a follow up to my last post – the following extension methods make it easy to manually serialize claim sets: public static XElement Serialize(  this ClaimSet set, IEnumerable<Type> knownTypes){    DataContractSerializer dcs = new DataContractSerializer(        set.GetType(),        knownTypes,        int.MaxValue,        false,        true,        … Continue reading

Posted in IdentityModel | Leave a comment

Re:MVP

Quoting Brian: “Microsoft has decided I didn’t cause too much trouble over the last 12 months so I get to continue being a {0} MVP. Thanks!”, “Developer Security”

Posted in Uncategorized | Leave a comment

Using IdentityModel: Serializing Claim Sets

Both Claim and ClaimSet are decorated with DataContract/DataMember attributes. This means they are made for serialization. And this makes sense – maybe you want to forward a claim set (server to server) or send a claim set from server to … Continue reading

Posted in IdentityModel | Leave a comment