Your SlideShare is downloading. ×
Protecting Online Identities
Upcoming SlideShare
Loading in...5
×

Thanks for flagging this SlideShare!

Oops! An error has occurred.

×

Introducing the official SlideShare app

Stunning, full-screen experience for iPhone and Android

Text the download link to your phone

Standard text messaging rates apply

Protecting Online Identities

369
views

Published on

Learn how Microsoft provides a range of identity solutions for helping developers more easily build seamless user experiences that include Federation, Authentication, UX Customization, Open Standards, …

Learn how Microsoft provides a range of identity solutions for helping developers more easily build seamless user experiences that include Federation, Authentication, UX Customization, Open Standards, Open ID and more.

Published in: Technology, Business

0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total Views
369
On Slideshare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
5
Comments
0
Likes
0
Embeds 0
No embeds

Report content
Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
No notes for slide

Transcript

  • 1. Session: MIX09-T27F Live Identity Services Overview
  • 2. Web ISVs Organizations Developers • Federation for • Turnkey selling their • Customizable federation for applications to identity UX adopting organizations • Single Sign On services • Easy on- • Access to user (Online, Live, IS boarding of new Vs) data customers • Works with existing identity infrastructure
  • 3. Baseline understanding of Live ID Web Developers • Consuming Windows Live IDs on your site • Accessing user data on your site ISVs • Consuming federated identities • Rapid on-boarding for organizations
  • 4. • Authentication: users, applications, devices Identities Strong • Investing in 2FA such as Smartcard, StartKey Authentication • User / IP reputation, Account abuse prevention Attacker Resistant • Live ID is fully customizable UI Customization • Delegated auth: user permission to access data Data Portability OpenID • Embracing Open Standards Federated • Compatible with Microsoft Federation Gateway Authentication
  • 5. Type of identity Credential Types Principal Types • [Strong] Password, Principal Acting for Self Acting for User Pin User User auth • eID / Smart card (Client or Web) Application App auth (AppID) Delegation (Good) • CardSpace Impersonation • Policy-driven control (BAD!) Device DeviceID Linked DeviceID The Password Types of Live ID Users Anti-Pattern! • Live Mail / Hotmail accounts • EASI (“E-mail As Sign-In”) • Managed domains • Federated domains
  • 6. Consume Accessing user identities & data SSO • Delegated Auth SDK • Web Authentication • Client SDK • Preview: Open ID
  • 7. Cross-platform HTML http://login.live.com/controls/WebAuth.htm appid=<%=AppId%> context=welcomepage Existing: WebAuth.htm style=font-size=10pt; New: WebAuthLogo.htm font-family=verdana; font-style=normal; New: WebAuthButton.htm font-weight=bold; background=white; color=black;
  • 8. Live ID Web Authentication SDK Docs http://go.microsoft.com/fwlink/?LinkID=91762 Relying Party Web Site e.g., Contoso.com 1 End User 5 w/ web browser 4 2 3 Live ID WebAuth service
  • 9. Recognizable & not jarring Sign-in Sign-up Consent
  • 10. Customizable Contents Elements that can be customized. Partner Logo Task statement Product description Sign up section Task integration statement Header background Customizable Theme Elements cannot change. Sign-up section Customize look & feel. Font color Background color Button color User tile color Live ID description color
  • 11. Microsoft is becoming an OpenID Provider (OP) Try the Live ID – OpenID Provider CTP Now 1. Set up a Live ID INT account: https://login.Live-INT.com/ 2. Set up OpenID alias: https://OpenID.Live-INT.com /beta/ManageOpenID.srf 3. Use OpenID 2.0 login URI: OpenID.Live-INT.com 4. Send feedback: openidfb@microsoft.com >> Production release of Live ID – OpenID Provider later this year
  • 12. Consume Accessing user identities & data SSO • Delegated Auth SDK • Web Authentication • Client SDK • Preview: Open ID
  • 13. “Granting Consent” phase End User with browser Consent UI consent.live.com Application Provider “Using Consent” Phase (user can be offline) (web site) Resource Provider (e.g., Windows Live Contacts) Live ID Delegation Service
  • 14. Don’t panic! The SDK libraries handle all this for you! ru= ps=Contacts.View,Contacts.Update pl= ttype= 1: Compact token, 2: SAML token mkt= app=appid Application Verifier token: ts ip sig AppID, Timestamp, Client IP, SHA256 signature appctx=welcomepage
  • 15. Federation Rapid on- Infrastructure boarding / tools • Standards based • Microsoft Services • WS-Trust/WS-Fed Connector • Microsoft Federation Gateway
  • 16. Benefits of federated identity more services and applications more customers greatly simplify
  • 17. Identity Providers (IdP) User Applications Relying Party (RP) Client SDK Live ID Windows Microsoft App Federation Web Site / Online App Gateway (MFG) Browser Live ID Other federated Identity Identity Providers Provider
  • 18. Microsoft Services Connector Microsoft Federation Gateway Hub and spoke Connects auto-provisioning Production customizable 2006 self-service Free federation provisioning Objective: Connect to cloud services without changing existing identity infrastructure
  • 19. Federation Rapid on- Infrastructure boarding / tools • Standards based • Microsoft Services • WS-Trust/WS-Fed Connector • Microsoft Federation Gateway
  • 20. Using Federation Gateway & MSC 1. User clicks link -- 3. Services Connector issues login token and redirects to Federation Gateway 2. 4. Federation Gateway validates token and transforms claims 5. Federation Gateway issues service Browser token and redirects to service 6. User accesses service Office Desktop Apps Cloud Microsoft Microsoft Enterprise Federation Services Applications Connector Gateway Developer Active Services Directory
  • 21. Web ISVs Organizations developers • Federation for • Turnkey selling their • Customizable federation for applications to identity UX adopting organizations • Single Sign On services • Easy on- • Access to user (Online, Live, IS boarding of new Vs) data customers • Works with existing identity infrastructure
  • 22. Your feedback is important!
  • 23. © 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.