1. Windows Identity Framework An overview of digital identity and single sign on.

3. Claims

4. Security Token Service (STS)

5. Active Directory Federation Services (ADFS 2.0)

6. Claims Aware Application

7. Windows Identity Foundation (WIF)

8. Passive Federation (Intranet Scenario)

9. Partner Federation

11. The amount of identities users must relate to (roles, groups)

12. Increasing cost around administration and maintenance of user stores

13. Lack of control over user identities, both by user himself and the organizations

14. When someone quits, how many identities in how many systems must be deactivated ?

17. Applications using Claims have one common model.

18. Anonymize users (IsOver18).

19. Can be accessed over internet as well as intranet.

20. Can work with browsers and web services.

22. Talks to other STSs with partner organization

24. Integrated with Active Directory

25. Supports both active as well as passive clients

26. Can integrate with other WS-trust, and other STS’s

27. Supports SAML 1.1 and 2.0 Tokens.

28. Supports WS-Fed (1 and 2) and SAML 2.0 protocol (not 1.1)

30. No longer required to make authentication decisions

31. Same authorization logic for Application

32. Deployed on the Intranet or as a Cloud service

34. Validates incoming security token parses claims that are inside.

35. Reduces complexity and necessary code to implement security in .NET apps. (no need to be a security expert)

36. Provides plumbing tools integrated into Visual studio to configure .NET apps to use Claims and STS’s

38. Your ADFS STS YourClaims-aware app Partner ActiveDirectory Partner ADFS STS & IP Partner user Browse app Not authenticated Redirect to your STS Home realm discovery Redirected to partner STS requesting ST for partner user Authenticate Return ST for consumption by your STS Redirected to your STS ST ST ST ST Process token Return new ST Send Token Return pageand cookie

39. DEMO

40. Q&A Manu Sharma Senior Software Developer Manu.Sharma@blackline.com More Info http://msdn.microsoft.com/en-us/security/aa570351

41. Thank You!