OK, so here I am in my hotel room ready to rip off a really long blog entry to close out caching SCT’s in a database, and I can’t get to the internet. Go figure. I’ll have to wing where I left off from memory. Last discussion I reviewed serializing a...

Last entry I discussed how to extend the SCT manager, and MRUSecurityTokenCache to use a database to persist tokens to share SCT's across service instances within a web farm. I left the details of token serialization not implemented however. This blog...

Sorry I’ve gone dark for the last few days just as things were getting interesting and I had promised some code snippets. I decided to actually implement a solution using a distributed cache for SCT’s – I had implemented a proof-of-concept embedding state...

Most web developers are familiar with one way with maintaining state within a web farm from their ASP days...server affinity. This was really the only optional available before .NET other than writing your own distributed session management solution for...

A security context token is a lightweight token that can be established for multiple message exchanges between two endpoints. It only makes sense to establish an SCT if it is anticipated that multiple messages will be exchanged. The specification for...

I'm a software architect with the Archtecture Strategy group at Microsoft. I've been working up to starting a blog for some time now, and have finally run out of excuses to put it off any longer. Mind you I like blogs and gets lots of value out of what...