Monthly Archives: May 2010

Video of Moxie Marlinspike’s “More Tricks for Defeating SSL” talk

http://www.mefeedia.com/watch/26711228

Posted in Uncategorized | Leave a comment

Updated StarterSTS Documentation & Identity Delegation Screencast

I recorded a short screencast describing the identity delegation feature in StarterSTS 1.1. You can watch it here. I also uploaded an updated version of the documentation here.

Posted in IdentityModel | Leave a comment

StarterSTS 1.1 CTP – ActAs Support

Due to popular demand, I added identity delegation (aka ActAs) support to StarterSTS. To give this feature a try, first download the new bits and add a enableActAs = true to startersts.config. You then have to configure which user account … Continue reading

Posted in IdentityModel | Leave a comment

A more elegant way of embedding a SOAP security header in Silverlight 4

The current situation with Silverlight is, that there is no support for the WCF federation binding. This means that all security token related interactions have to be done manually. Requesting the token from an STS is not really the bad … Continue reading

Posted in IdentityModel | Leave a comment

Thinktecture.IdentityModel: WRAP and SWT Support

The latest drop of Thinktecture.IdentityModel contains some helpers for the Web Resource Authorization Protocol (WRAP) and Simple Web Tokens (SWT). WRAPThe WrapClient class is a helper to request SWT tokens via WRAP. It supports issuer/key, SWT and SAML input credentials, … Continue reading

Posted in IdentityModel | Leave a comment

Thinktecture.IdentityModel: Comparing Strings without leaking Timinig Information

Paul Hill commented on a recent post where I was comparing HMACSHA256 signatures. In a nutshell his complaint was that I am leaking timing information while doing so – or in other words, my code returned faster with wrong (or … Continue reading

Posted in IdentityModel | Leave a comment

ADFS 2.0 RTW

Finally – the identity story is complete (for now). Download ADFS 2.0.

Posted in Uncategorized | Leave a comment

Thinktecture.IdentityModel: WIF Support for WCF REST Services and OData

The latest drop of Thinktecture.IdentityModel includes plumbing and support for WIF, claims and tokens for WCF REST services and Data Services (aka OData). Cibrax has an alternative implementation that uses the WCF Rest Starter Kit. His recent post reminded me … Continue reading

Posted in IdentityModel | 4 Comments

Thinktecture.IdentityModel: Claims Debugger Visualizer

In the latest drop of Thinktecture.IdentityModel you can find a debugger visualizer for IClaimsIdentity and IClaimsPrincipal. Have fun ;) PS. Thanks to Mr. UI.

Posted in IdentityModel | Leave a comment