Category Archives: .NET Security

Azure Authentication Library

Posted on December 17, 2012 by Dominick Baier

Azure Authentication Library (AAL) is slowly turning into a really useful “easy to use” library to write client code against Microsoft identity back-ends like Windows Azure Active Directory and Access Control Service (and hopefully ADFS too at some point). Very … Continue reading →

Posted in .NET Security, Azure, IdentityModel, WCF | Leave a comment

Identity & Access Control in .NET, ASP.NET and WCF 4.5

Posted on December 14, 2012 by Dominick Baier

I just hit my first big milestone in the security curriculum for Pluralsight. All three base identity & access control courses are done and online now. They cover what used to be called WIF and is now part of .NET … Continue reading →

Posted in .NET Security, ASP.NET, Conferences & Training, IdentityModel, IdentityServer, WCF, WebAPI | 6 Comments

Progress on Thinktecture IdentityServer v2 (hopefully the last update ;)

Posted on December 9, 2012 by Dominick Baier

We’ve been extremely busy with our days jobs in the last weeks – end of year madness. That means we did not have much time to work on IdSrv – but – all the reported bugs seem to be fixed … Continue reading →

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer, OAuth, WebAPI | Leave a comment

Identity & Access Control in ASP.NET 4.5

Posted on November 9, 2012 by Dominick Baier

My 2nd course for PluralSight is now online! Identity & Access Control in ASP.NET 4.5 Have fun!

Posted in .NET Security, ASP.NET, Conferences & Training, IdentityModel, IdentityServer | 12 Comments

Using Claims-based Authorization in MVC and Web API

Posted on October 26, 2012 by Dominick Baier

.NET 4.5 ships with a claims-based authorization infrastructure around the ClaimsAuthorizationManager class. I have written about that before, and I am still a fan of that approach (not necessary of the non-existent tooling). Claims-based authorization encourages you to have a … Continue reading →

Posted in .NET Security, ASP.NET, IdentityModel, WebAPI | 48 Comments

Federation Gateway and Home Realm Discovery in Thinktecture.IdentityServer v2

Posted on October 18, 2012 by Dominick Baier

I just uploaded a “feature-refresh” of the IdSrv Beta to github. This includes amongst some bug fixes the ability to use IdSrv as a federation gateway/home realm discovery page. This gives you the ability to use IdSrv to broker trust … Continue reading →

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer | 1 Comment

Thinktecture IdentityServer 2 Tutorial: The 1st Web Application

Posted on October 18, 2012 by Dominick Baier

https://vimeo.com/51666380 Shows how to setup a web application with identity server for authentication. Have fun!

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer | 2 Comments

Setup Thinktecture IdentityServer v2 in 7 minutes

Posted on October 12, 2012 by Dominick Baier

Here’s how: https://vimeo.com/51088126 HTH

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer, WCF, WebAPI | 7 Comments

Thinktecture IdentityServer v2 BETA

Posted on October 12, 2012 by Dominick Baier

IdentityServer v2 beta is done! You can get it from the new thinktecture organization page on github as well as the new project page for IdentityServer (or directly from the download page). What’s new?Well – on the surface IdSrv 2 … Continue reading →

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer, WCF, WebAPI | 7 Comments

Custom Claims Principals in .NET 4.5

Posted on October 8, 2012 by Dominick Baier

Recently I got a number of questions on what’s the best approach to implement a “custom claims principal”. What people typically mean by this is a ClaimsPrincipal derived class that provides some extra API surface like properties (think .EmailAddress). The … Continue reading →

Posted in .NET Security, IdentityModel | 11 Comments