Authentification Web Unique et sécurisation de services Web .Net et Java avec OpenSSO. Intervenants: Alain Barbier et Stève Sfartz (Microsoft)

1. !quot;#$%&#'(')*#'+&,-%.,quot;&'/quot;%,%#,01)quot;2'0*#'+&,
3%,0%24')%0,-%.,56%#,%#,7*4*,*4%),89%&::8
!quot;#$%&'#()$*( .-56*&.7#(-8
!(+,$-*+-* !(+,$-*+-*
./%&0$+(1232-*42 0$+(1217-&9(#%+*
,--:;<<)quot;1=>27#(-8>+14&

3. 89%&::8
!quot;#$%&'()*+,--./)0(1

4. ;2'&)'9%0,3%,(+&)#'+&&%<%&#,
-%.::8

5. 89%&::8,=,>%0,(+&)#'+&0
!/-,*%-$7$+#-$1%
2 ?@#%&0'.>%,.*01%,0quot;2,7!!:
3 Aquot;>#'9>%0,<+3quot;>%0,(+quot;2&'0,B45678)!(%$9:9-,$8);9#*quot;0/)<=(%1(%quot;/>8)
?#9@8)A(-B%(C5)($)A7CC
2 Aquot;>#'D(*)#%quot;20,B)$*E&*F%CG,&'4%*quot;@
2 ;*2,2%00+quot;2)%,B?$9'9/,$(B%8)%(,'D8)/(%E9-(8)Dquot;*B'(8)#9E(,BC
2 H+I*quot;<%0
!/-1($2#-$1%
2 ;+>')I,J,HKF>%0,L,:quot;M%#0,L,N+&3'#'+&0,L,H%09+&0%,
;2+4'3%2
?%-@=(#-$1%
2 N!,:'#%<'&3%2,O,82*)>%,!))%00,A*&*F%2,B-%::8,O,
P1312*#'+&C

6. 89%&::8
FG*G%,$9quot;#
4(/)H%9#-9H(/

7. Aquot;>#'9>%0,)+<9#%0,=,quot;&%,'3%&#'#1
2 !quot;#$%&'&()%*$+,#-'$(&*$+(#
./0-%*(#.1*2#3&445+*quot;%(#
4/$+quot;&((*$+(#3*#(*+6&.*(
2 7%%+&8$%(#'/.)$9#)6*.#$quot;*#
:*(%&/quot;#'/.)'*#3*(#./0-%*(
3 ;*(-/quot;()8&'&%5
3 730&quot;&(%+)%&/quot;
3 7quot;/quot;<0&()%&/quot;#3*(#+*')%&/quot;(#)6*.#
3=)$%+*(#4/$+quot;&((*$+(
2 >)(#3*#%+)&%*0*quot;%(#3&(%+&8$5(#
()quot;(#)$%/+&()%&/quot;#3*#
'=$%&'&()%*$+

8. N%2)>%,3%,)+&('*&)%Q!00+)'*#'+&,3%,
)+<9#%0
2 ?&*+#0*(#./0-%*(#($+#-'$(&*$+(#
3/0)&quot;*(
2 >)+%):*+#0*(#)%%+&8$%(
2 @%)8'&+#3*(#+*')%&/quot;(#3*#./quot;4&)quot;.*#
*quot;%+*#3/0)&quot;*(
2 A5.$+&(*+#'*#%+)quot;(4*+%#3=&quot;4/+0)%&/quot;(
2 7$3&%*+
2 !%&'&(*+#3*(#(%)quot;3)+3(
2 7$%1*quot;%&4&.)%&/quot;#$quot;&B$*#*%#-+/%*.%&/quot;#
3*#0*(#3/quot;quot;5*(#-*+(/quot;quot;*''*(

9. P1312*#'+&,=,>*,)+&4%2F%&)%

10. 89%&::8
FG*G%,$9quot;#
4()H%quot;*B9$

11. 89%&::8,=,P1312*#'+&
2 C*3'*%#D#E+5)%&/quot;#3=$quot;#0/3F'*#3*#(*+6&.*#-+/6&3*+#A7G?H#./quot;4&:$+5#*%#
&quot;%5:+5#*quot;#B$*'B$*(#0&quot;$%*(#
2 I$8#3*#4535+)%&/quot;#0$'%&J-+/%/./'*(#D#Kquot;%5:+)%&/quot;#3=$quot;#A>#
&quot;35-*quot;3)00*quot;%#3*#(/quot;#L')quot;:):*#3*#4535+)%&/quot;L#MA7G?H,#KNJCC,#OAJCPNQ
2 >+/9<#3*#4535+)%&/quot;#6&+%$*'#D#!%&'&()%&/quot;#3*(#-+/%/./'*(#3*#4535+)%&/quot;#
-/$+#'*#%+)quot;(-/+%#(5.$+&(5#3=)%%+&8$%(#3=)--'&.)%&/quot;(#'*:).<#
2 A$--/+%#3*(#(%)quot;3)+3(#0)R*$+(#%*'(#B$*#A7G?,#OAJC*3*+)%&/quot;,#
?&8*+%<#KNJCC,#OAJS+$(%,#OAJA*.$+&%<#*%#OAJ>/'&.<
2 >+/4&'#T7EG?#A7G?H
2 E/quot;(/00*#*%#%+)3$&%#'*(#R*%/quot;(#3*(#(/'$%&/quot;(#O7G#'*(#-'$(#+5-)quot;3$*(

12. ;2'&)'9%0,::8,-%.
!)#'4%,R'2%)#+2I,P%3%2*#'+&,:%24')%0
6B$M(#$9:9-,$9quot;#)
=(%1(%quot;/K4567
E+/((#
8+/U(*+ FAI7%quot;@J FA 6-$9E()
59%(-$quot;%J)
quot;B)
65K6L
ISS>A
6HH'9-,$9quot;#
6N(#$)
AAO
;A

13. ::8,-%.,2%9+0*&#,0quot;2,>*,(1312*#'+&,
3S'3%&#'#1
P(#(E,)A(%E(%
>/'&%&B$*#3Y# >/'&%&B$*#
)$%1*quot;%&4&.)%&/quot;#]#
)$%1*quot;%&4&.)%&/quot; 3Y)$%/+&()%&/quot;
P%)8'&((*0*quot;%# 8)(*#3*#E')&0(
]#8)(*#3*#.')&0(
A*.$+&%<#S/a*quot;#A*+6&.* 3*#')#+*')%&/quot;# 3*4)$'%W)(-9#JZ#S/$%#
Mb*quot;*6)#A*+6*+Q '*#0/quot;3*
X/0#^#
3*#./quot;4&)quot;.* #K(($*+#^#ASA
;PNG_XN`((4)+%2
(*.+*%W)(-9#JZ
JZ
JZ
>/&quot;%$+*#[
S+)3$.%&/quot;#>/&quot;%$+*
>/&quot;%$+*#^#[
c*+8*+/(
E')&0(# E')&0(#
K(($*+#X)0*# 7$%1*quot;%&.)%&/quot;# 7$%1/+&2)%&/quot;#
;*:&(%+< G)quot;):*+ G)quot;):*+
E')&0( E')&0(
O&quot;3/U(#
7$%1*quot;%&.)%&/quot; 7$%1*quot;%&.)%&/quot; 7$%1/+&2)%&/quot;
C*3*+)%*3#7$%1*quot;%&.)%&/quot;#G/3$'*
G/3$'*
d*%/quot;#A7G? G/3$'* G/3$'*
c*+8*+/(
KKA#V#7A>WXPS
E'&*quot;%

14. Tquot;S%0#D)%,/quot;%,U%&%4*,:%24%2,V
2 A*.$+&%<#S/a*quot;#A*+6&.*#-/$+#7.%&6*#N&+*.%/+<
3 C/$+quot;&((*$+#3=&3*quot;%&%5
3 C535+)%&/quot;#3=&3*quot;%&%5
2 !quot;#4/$+quot;&((*$+#3*#.)+%*#3=&3*quot;%&%5#-/$+#7.%&6*#N&+*.%/+<
3 K3*quot;%&%5(#E)+3A-).*#*%#Kquot;4/E)+3
2 !quot;#:*(%&/quot;quot;)&+*#3=5%)8'&((*0*quot;%#3*#')#+*')%&/quot;#3*#4535+)%&/quot;
3 7$%/0)%&()%&/quot;#)$#%+)6*(#3*#05%)J3/quot;quot;5*(
2 e)(5#($+#3*(#(%)quot;3)+3(#*%#'=&quot;%*+/-5+)8&'&%5
3 >+/%/./'*(#OAJf#*%#A7G?HWg#-/$+#'*#O*8#AA_
3 d*%/quot;(#A7G?#W#*%#HWg

15. A')2+0+(#,%#,>*,(1312*#'+&,3S'3%&#'#1
2 A$,#*,%*/);AIF(*(%,$9quot;#8)A6L4
3 6HH%quot;-M()*J#,D9QB(
3 59::G%(#$)*B)-(%-'()*()-quot;#:9,#-(
2 !quot;#E(%N(#-(),B$quot;B%)*()A6L4)R
3 6*quot;H$9quot;#)A6L4)R)*,#/)'Squot;::%()P(#(E,
3 A6L4)R)-quot;DD():quot;%D,$)*()T($quot;#
3 A6L4)R)-quot;DD()H%quot;$quot;-quot;'()*()/9#N'()/9N#)quot;#);(1

16. 8quot;4%2#quot;2%,3%0,'<9>1<%&#*#'+&0

17. A*#quot;2*#'+&,3%0,0#*&3*230

18. 89%&::8
AG-B%9$G);(1)A(%E9-(/
4(/)H%9#-9H(/

19. :1)quot;2'#1,-%.,:%24')%0
U(/quot;9#/
C*(#$9:9-,$9quot;#)*()'+B$9'9/,$(B%
7%G/(%E(%)'+9*(#$9$G
7%G/(%E(%)'+9#$GN%9$G)($)'+,#quot;#JD,$
?$9'9/,$9quot;#)*(/)$(-M#quot;'quot;N9(/)(@9/$,#$(/
6B*9$

20. :1)quot;2'#1,-%.,:%24')%0
>+/8'F0*(
?)#(5.$+&%5#3$#-+/%/./'*#*(%#
*((*quot;%&*''*#0)&(#&quot;($44&()quot;%*
A*$'*0*quot;%#3$#-/&quot;%#]#-/&quot;%W
>)(#3*#quot;/quot;J+5-$3&)%&/quot;
>)(#3*#(5.$+&%5#1/+(#-+/%/./'*
>)(#3=5'50*quot;%#3$#0*(():*#(&:quot;5#h#
*quot;.+<-%5

21. :1)quot;2'0*#'+&,3quot;,#2*&09+2#
#>+/%*.%&/quot;#'&0&%5*#)$#-/&quot;%#]#-/&quot;%
!
#X5.*((&%5#3*#-+/%5:*+#)$#quot;&6*)$#0*(():*
!

22. :1)quot;2'0*#'+&,-%.,:%24')%0

23. W'&3'&F,:8!;
2 A5.$+&%5#/+%1/:/quot;)'*#)$#
05%&*+
3 I*)3*+i8/3<
3 >+/6&3*+(
2 OA#A*.$+&%<#./quot;%*quot;*$+#
3=)((*+%&/quot;#3*#(5.$+&%5#
&quot;.'$(#3)quot;(#'*#1*)3*+
3 >+/4&'
3 !%&'&()%&/quot;#90'3(&:,#90'J
*quot;.+<-%

24. 89%&::8
AG-B%9$G);(1)A(%E9-(/
4(/):quot;#-$9quot;#/

25. :1)quot;2'#1,X%.,0%24')%0,=,Y2+'0,
<+3K>%0
2 dA;#jk#-'$:J&quot;(
3 Kquot;%5:+)%&/quot;#*quot;#%)quot;%#B$*#4&'%+*#($+#'*(#(*+6*$+(#3=)--'&.)%&/quot;(
2 K3*quot;%&%<#A*+6&.*(
3 Kquot;%*+4).*(#U(3'i;PAS#-/$+
l 7$%1*quot;%&4&.)%&/quot;,#7$%/+&()%&/quot;,#7%%+&8$%(,#?/::&quot;:
2 C+)0*U/+a#*%#(%)quot;3)+3(
3 ?&8*+%<#7''&)quot;.*#MKNJOACQ,#OAJf
2 I)quot;3'*+(#O*8#A*+6&.*(

26. :1)quot;2'#1,*quot;,&'4%*quot;,<%00*F%
)))4()T($quot;#)*+9*(#$9$G)(/$)$%,#/Hquot;%$G)*,#/)'+(#$V$()
AO67)H,%)',)%(QBV$();(1)A(%E9-(W

27. :1)quot;2'#1,*quot;,&'4%*quot;,<%00*F%
)))4()T($quot;#)*+9*(#$9$G)(/$)$%,#/Hquot;%$G)*,#/)'+(#$V$()
AO67)H,%)',)%GHquot;#/();(1)A(%E9-(W

28. 89%&::8,=,,!F%&#0,-%.,:%24')%0,
B7:H,Z[C
2 >+/8'F0*D#
3 E/00*quot;%#0*%%+*#*quot;#-').*#')#(5.$+&()%&/quot;#3*#U*8# OAA#7:*quot;%
#
(*+6&.*(#3)quot;(#3*(#./quot;%*quot;*$+(#3&445+*quot;%(#()quot;(# _-*quot;AA_#.'&*quot;%(3a
0/3&4&*+#'=)--'&.)%&/quot;#m
O*8#A*+6&.*
2 ?*#-+/.*(($( >+/6&3*+
3 C/$+quot;&%#$quot;#):*quot;%#B$&#*(%#35-'/<5#($+#'*#./quot;%*quot;*$+# !quot;#$ %
quot;
%&!!'
-/$+#./quot;(/00*+,#6)'&3*+#*%#%+)quot;(4/+0*+#'*(#R*%/quot;(# A*+6*$+
$
3*#(5.$+&%5W _-*quot;AA_
OAA#7:*quot;%
3 78(%+).%&/quot;#3*#')#(5.$+&%5#-)+#+)--/+%#]#'=)--'&.)%&/quot;#
_-*quot;AA_#.'&*quot;%(3a
M/+%1/:/quot;)'&%5QW
3 !quot;#):*quot;%#OAA#-*+0*%#3*#(%)quot;3)+3&(*+#')#(5.$+&%5# O*8#A*+6&.*
&quot;35-*quot;3)00*quot;%#3$#./quot;%*quot;*$+ E'&*quot;%
l K0-'50*quot;%*+#$quot;*#*9%*quot;(&/quot;#3=)$%1*quot;%&4&.)%&/quot;#
! ()*+,-).(/0123)
&quot;%5:+5*#)$#./quot;%*quot;*$+#MdA;#jkQ
l A5.$+&()%&/quot;#3*(#+*B$n%*(#A_7>#*%#6)'&3)%&/quot;#3*(#
+5-/quot;(*(#-)+#'*#OAEW
l o)'&3)%&/quot;#3*(#+*B$n%*(#A_7>#*%#(5.$+&()%&/quot;#3*(#
+5-/quot;(*(#-)+#'*#OA>W

29. A%@,O,Y2quot;0#

30. !)#'4'#1,:Y:
#J#N*0)quot;3*#3*(#05%)3/quot;quot;5*(#MGPTQ
H#l#;*%/$+#3*(#05%)3/quot;quot;5*(#MA*.$+&%<#>/'&.<Q
p#l#N*0)quot;3*#3*(#05%)3/quot;quot;5*(#MGPTQ
[#l#;*%/$+#3*(#05%)3/quot;quot;5*(#MA*.$+&%<#>/'&.<Q
q#l#;*B$n%*#;AS#3$#.'&*quot;%
k#l#;5-/quot;(*#;AS;#3$#ASA
r#l#;*B$n%*#(5.$+&(5*#6*+(#'*#(*+6*$+
s#l#;5-/quot;(*#3$#(*+6*$+

31. ]%0,<+3K>%0,quot;0quot;%>0
A(/2-
:Y: :Y:Z :Y:^
X#Equot;9()T($quot;#);A)
X#Equot;9()T($quot;#)AAO)
X#Equot;9()T($quot;#)AAO) *B)A[A))))))
Y(Zquot;9$)T($quot;#);A)
Y(Zquot;9$)T($quot;#);A) Y(Zquot;9$)T($quot;#);A)
Hquot;B%)A[AR)
Hquot;B%);A7
-:N -:; -:N -:;
A(/2- A(/2-
:Y: :Y: :Y:
-:N -:NQ-:; -:;

33. ]S'3%&#'#1,%&,%&#2%92'0%,%#,*quot;D3%>_
?#)Dquot;*.'()B#9:9G)Hquot;B%)NG%(%)'(/)9*(#$9$G/
C'*9&8&'&%5#*%#E1/&9 >+/3$.%&6&%5#N56*'/--*$+ e)(5#($+#'*(#(%)quot;3)+3(
A*+6&.*(
WX*%#7..*((#
G&.+/(/4%#
E')&0(Je)(*3#7..*((
?&6*#K3*quot;%&%<# C*3*+)%&/quot;# E/quot;%+/'#
A*+6&.*( b)%*U)< A*+6&.*
G&.+/(/4%#
A/4%U)+*
tb*quot;*6)u# A*+6&.*(# O&quot;3/U(#
A*+6*+ tb*quot;*6)u# ?&6*#
E/quot;quot;*.%/+ E)+3A-).*# C+)0*U/+a C+)0*U/+a
tb*quot;*6)u
7.%&6*#N&+*.%/+<

34. N+&#2`>%,3S*))K0,!aquot;2%,56%#,:%24')%0
6B)*('])*(/):%quot;#$9.%(/)*()'+(#$%(H%9/(
x$/&#m
x$&#m
S/$%#4/$+quot;&((*$+#
!K e$(
E/quot;%+v'*#3Y)..F(
3Y&3*quot;%&%5
_+.1*(%+)%&/quot;(
?&6*#KN
N/quot;quot;5*(
w3/0)&quot;Z
B1-(*&#::quot;$+#-$1%
B12&+quot;$*%-2

35. N+&#2`>%,3S*))K0,b,!aquot;2%,56%#,:%24')%0
4(/)9#$(%,-$9quot;#/
pW#G)-#&quot;-$%#.')&0(#
%/#/$%-$%#.')&0(#8)(*3#/quot;#
W#N*4&quot;*#)..*((#./quot;%+/'# )..*((#./quot;%+/'#+$'*(
+$'*(#4/+#)#.$(%/0*+ y/$+#7..*((#E/quot;%+/'#
>+/R*.%
M)#1/(%*3#ASAQ
gW#E*+%&4&.)%*#
*9.1)quot;:*z#
-*+&/3&.)''<#
HW#
A*
+*4+*(1*3
quot;3
#E
')&
0
(
;*'<&quot;:#>)+%< ;*B$*(%/+
My/$+#7--Q My/$+#E$(%/0*+Q

36. ;+2#*'>,56%#,!))%00,N+&#2+>,:%24')%0
1%%-(Dii)..*((./quot;%+/'W*9W)2$+*W0&.+/(/4%W./0i#

39. >/+%)&'#WX*%#7..*((#E/quot;%+/'#A*+6&.*(

43. N+&#2`>%,3S*))K0,b,!aquot;2%,56%#,:%24')%0
4(/)9#$(%,-$9quot;#/
pW#G)-#&quot;-$%#.')&0(#
%/#/$%-$%#.')&0(#8)(*3#/quot;#
W#N*4&quot;*#)..*((#./quot;%+/'#
)..*((#./quot;%+/'#+$'*(
+$'*(#4/+#)#.$(%/0*+ y/$+#7..*((#E/quot;%+/'#
>+/R*.%
M)#1/(%*3#ASAQ
M/$
gW#E*+%&4&.)%*#
[W#
%-$
A* ')&0
*9.1)quot;:*z#
quot;3 (#4
%##.
-*+&/3&.)''<#
kWE')&0(#
#S/ +/0
+*4+*(1*3
.1*.a*3#&quot;#
HW#
a*
quot; #pQ
A*
;*'<&quot;:#>)+%<
quot;
3#E
')&
0(
;*'<&quot;:#>)+%< ;*B$*(%/+
qW#A*quot;3#G*(():*
My/$+#7--Q My/$+#E$(%/0*+Q
Ui%/a*quot;

44. !2)$'#%)#quot;2%,!aquot;2%,56%#,:%24')%0
!quot;#$%&'()*+,--./
>/$+#.1)B$*#./0-%*#72$+*#WX*%#A*+6&.*(#D
!quot;!#$%&'#(%&')*'#+,-#.,/%)-
!,'0*1,#2,#3,-/*%)#2,-#'43+,-#,/#2,#/'5)-(%'65*/%)#2,#1+5*6-
78$%-9-#5&#/'50,'-#2:&),#;<=#$&>+*?&,
>/+%)'
ASA N)%)#
G/3*
;$'*#G:0%
'
;$'*#>+/.*((&quot;:
A%/+):*

45. !aquot;2%,56%#,:%24')%0
67C)HB1'9QB()*()-quot;#$%&'()*+,--./
A*.$+&%<#S/a*quot;#A*+6&.*
A*.$+&%<#S/a*quot;#A*+6&.*
o/%+*#ASA
I)quot;3'*+(,#7$%1*quot;%&.)%/+(,#>/'&.&*(#{
E$(%/0#I)quot;3'*+(,#7$%1*quot;%&.)%/+(,#>/'&.&*(#{
E$(%/0#I)quot;3'*+(,#7$%1*quot;%&.)%/+(,#>/'&.&*(#{
KNCT
C+)0*U/+a#tb*quot;*6)u
KNCT
OEC#C+/quot;%JPquot;3
OAJC*3*+)%&/quot;
OAJS+$(%#Wp#
M>)((&4Q
42-)52)-
E'&*quot;%#A_7> E'&*quot;%#ISS>
MWX*%,#d7o7{Q Me+/U(*+,#;PAS{Q

46. 1%%-DiiUUUWR3/%quot;*%(*+6&.*(W./0i#
A$--/+%#4/+#
())*++$,-./0-1 %*0#2)*+$34+
A*+6&.*#e$(#A*+6&.*#
4*)%$+*#/4#WXPS# 2&<))quot;//&'quot;$+,)quot;/& !quot;//(5quot;&-.66quot;$&'quot;$+,)quot;& =,$#.(1&'quot;$+,)quot;/
A*+6&.*(#
A$--/+%#4/+#
7..*((#E/quot;%+/'#A*+6&.*
#4*)%$+*#/4#WXPS# <))quot;//&0%2#$%1& !quot;//(5quot;&-.66quot;$& 72quot;8(9&3$(2/4%$#&
A*+6&.*(# 01,quot;2# 01,quot;2# :$%+,;quot;$
!quot;#quot;$%&'
A$--/+%#4/+#;*')<# 'quot;$+,)quot;&-./&01,quot;2#&3$(2/4%$# 'quot;$+,)quot;&-./&'quot;$+,)quot;&3$(2/4%$#
/quot;*JU)<,#%U/JU)<#
)quot;3#0$'%&.)(%#
!quot;#$%&'#()*

47. :I&#$K0%
?)#4535+)%&/quot;#3Y&3*quot;%&%5#*quot;:'/8*quot;%#'*(#(.5quot;)+&/(#
$($*'(#3Y)$%1*quot;%&4&.)%&/quot;#*%#3*#./quot;%+v'*(#3Y)..F(
C/$+quot;&%$+*#3*#.')&0(
S+)quot;(4/+0)%&/quot;#3*#.')&0(
G&.+/(/4%#*%#A$quot;#/quot;%#3*$9#)--+/.1*(#./quot;6*+:*quot;%*(
A7G?H
C+)0*U/+a(#3*#A*+6&.*(#O*8#MOEC,#OAKSQ

48. C%&2*/quot;&:(1D/$-&:1/(&(@21/D(*&-1/2&quot;*2&:(1)quot;54*2&D*&..E
E/quot;%+v'*#3=)..F(#U*8,#C535+)%&/quot;#*%#(5.$+&()%&/quot;#3*(#U*8#(*+6&.*(

49. A%2)',c
#quot;#$%>)#()$*(F2/%>+14
227#(-8F4$+(1217->+14