Monthly Archives: June 2011

Me on LockDown Radio

Posted on June 23, 2011 by Dominick Baier

Seems to be radio week this week… Another interview I did quite a while ago with Michele and Patrick… http://www.lockdownpodcast.com/default.aspx?ShowNum=4

Posted in Uncategorized | Leave a comment

Access Control Service: Passive/Active Transition Sample

Posted on June 23, 2011 by Dominick Baier

Here you can find my updated ACS2 sample. In addition to the existing front ends (web [WS-Federation], console [SOAP & REST], Silverlight [REST]) and error handling, it now also includes a WPF client that shows the passive/active transition with a … Continue reading →

Posted in Azure, IdentityModel | 4 Comments

Access Control Service: Programmatically Accessing Identity Provider Information and Redirect URLs

Posted on June 23, 2011 by Dominick Baier

In my last post I showed you that different redirect URLs trigger different response behaviors in ACS. Where did I actually get these URLs from? The answer is simple – I asked ACS ;) ACS publishes a JSON encoded feed … Continue reading →

Posted in Azure, IdentityModel | Leave a comment

More Claims on DotNetRocks

Posted on June 23, 2011 by Dominick Baier

I met Carl and Richard at NDC, so we took the chance to have another chat about my favourite topic: claims ;) http://www.dotnetrocks.com/default.aspx?showNum=674 Have fun!

Posted in Conferences & Training | Leave a comment

Access Control Service: Transitioning between Active and Passive Scenarios

Posted on June 22, 2011 by Dominick Baier

As I mentioned in my last post, ACS features a number of ways to transition between protocol and token types. One not so widely known transition is between passive sign ins (browser) and active service consumers. Let’s see how this … Continue reading →

Posted in Azure, IdentityModel | Leave a comment

OT: Nice Photo Blog

Posted on June 22, 2011 by Dominick Baier

My good friend Heimo started blogging. Given his vast arsenal of cameras and lenses, this should be an interesting read… http://monoflop.blogspot.com/

Posted in Uncategorized | Leave a comment

Access Control Service: Protocol and Token Transition

Posted on June 22, 2011 by Dominick Baier

ACS v2 supports a number of protocols (WS-Federation, WS-Trust, OpenId, OAuth 2 / WRAP) and a number of token types (SWT, SAML 1.1/2.0) – see Vittorio’s Infographic here. Some protocols are designed for active client (WS-Trust, OAuth / WRAP) and … Continue reading →

Posted in Azure, IdentityModel | Leave a comment

Updates for Thinktecture.IdentityModel

Posted on June 17, 2011 by Dominick Baier

I just uploaded a new version to codeplex and nuget (Thinktecture.IdentityModel). Besides some bug fixes and clean up I added the ProtectedCookie feature and some more extension methods.

Posted in IdentityModel | Leave a comment

Useful Extensions for SecurityToken Handling – Convert a SecurityToken to Claims

Posted on June 17, 2011 by Dominick Baier

That’s a very common one: public static IClaimsPrincipal ToClaimsPrincipal( this SecurityToken token, X509Certificate2 signingCertificate){    var configuration = CreateStandardConfiguration(signingCertificate);    return token.ToClaimsPrincipal(configuration.CreateDefaultHandlerCollection());}   public static IClaimsPrincipal ToClaimsPrincipal(this SecurityToken token, X509Certificate2 signingCertificate, string audienceUri){    var configuration = CreateStandardConfiguration(signingCertificate);     configuration.AudienceRestriction.AudienceMode = AudienceUriMode.Always;    configuration.AudienceRestriction.AllowedAudienceUris.Add(new Uri(audienceUri));     return token.ToClaimsPrincipal(configuration.CreateDefaultHandlerCollection());}   public static IClaimsPrincipal ToClaimsPrincipal( … Continue reading →

Posted in IdentityModel | Leave a comment

Migrating a Local IdentityServer Membership Database to SQL Azure

Posted on June 9, 2011 by Dominick Baier

This is a useful tool to accomplish this: http://sqlazuremw.codeplex.com

Posted in Azure, IdentityServer | Leave a comment