Category Archives: IdentityModel

Claims-based Identity & Access Control Training in February

Posted on January 30, 2013 by Dominick Baier

I just got email confirming the February run of the “identity course” in Oslo. great! There are seats left and you can book here. Cu!  

Posted in .NET Security, ASP.NET, Azure, IdentityModel, IdentityServer, OAuth, WCF, WebAPI | Leave a comment

ASP.NET Web API Security: Setting up the Sample

Posted on January 9, 2013 by Dominick Baier

You can download the complete source from here. The Web API security sample is in samples/web api security. On my machine I have mapped the samples/web api security/webhost directory to IIS. I am sure you can use IIS Express as … Continue reading →

Posted in IdentityModel, WebAPI | 16 Comments

ASP.NET Web API Security: The Web Host and Service

Posted on January 8, 2013 by Dominick Baier

I will be using the same web hosted Web API service for the sample. The service is very simple: [Authorize] public class IdentityController : ApiController {     public ViewClaims Get()     {         return ViewClaims.GetAll();     } } …and the ViewClaims class simply returns … Continue reading →

Posted in ASP.NET, IdentityModel, IdentityServer, WebAPI | 5 Comments

How to implement Authentication with OAuth2

Posted on January 4, 2013 by Dominick Baier

I get this question a lot. Short answer: “you don’t!”. For the long answer: http://blogs.msdn.com/b/vbertocci/archive/2013/01/02/oauth-2-0-and-sign-in.aspx

Posted in IdentityModel, OAuth, WebAPI | Leave a comment

Thinktecture IdentityModel v2.3 Breaking Changes

Posted on January 2, 2013 by Dominick Baier

I just uploaded v2.3 to Nuget. There are a number of breaking changes I want to make you aware of (.Net 4.5 version only): By default the Web API authentication handler now requires SSL. You can turn that off on … Continue reading →

Posted in IdentityModel, WebAPI | Leave a comment

ASP.NET (Web API) Security: Prologue

Posted on December 30, 2012 by Dominick Baier

Many people asked me how all the moving parts of Thinktecture.IdentityModel, IdentityServer and ASP.NET and Web API relate to each other. And quite frankly, reading my old blog posts does not always help – a lot of things have changed, … Continue reading →

Posted in IdentityModel, WebAPI | 6 Comments

Thinktecture IdentityServer v2 RTM

Posted on December 28, 2012 by Dominick Baier

Title says it all – I am glad we could get this done before the end of the year!! Besides bug fixes since the last beta version, we added two features: identity server core nuget package and profile editor. I … Continue reading →

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer, OAuth, WCF, WebAPI | Leave a comment

Thinktecture.IdentityModel Nuget Package hits 10K downloads

Posted on December 28, 2012 by Dominick Baier

Thanks!

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer, WCF, WebAPI | Leave a comment

More Compatibility between Thinktecture.IdentityModel JWT and Microsoft JWT

Posted on December 21, 2012 by Dominick Baier

Reader centralbin comments: “In fact the reverse is also true : You can configure TT-STS as an IP-STS in ACS. The JWT tokens issued by TT-STS can also be consumed in ACS. The only “gotcha” is that you manually need … Continue reading →

Posted in Azure, IdentityModel, IdentityServer, OAuth, WebAPI | 1 Comment

Compatibility between Thinktecture.IdentityModel JWT and Microsoft JWT

Posted on December 21, 2012 by Dominick Baier

I just did a quick test – the JWT token handler in Thinktecture.IdentityModel can consume and validate JWTs coming from Access Control Service. Thought I let you know ;) Nice.

Posted in Azure, IdentityModel, OAuth, WebAPI | 1 Comment