David Crawford's WebLog

A Guide to Claims-Based Identity and Access Control (2nd Edition)

David Crawford - MSFT — Sat, 08 Oct 2011 19:00:16 GMT

Check out the sections related to federating SharePoint - specifically logout to compliment your readings from the SharePoint whitepaper.

patterns & practices Developer Center

September 2011

Summary

Imagine a world where you don't have to worry about authentication. Imagine instead that all requests to your application already include the information you need to make access control decisions and to personalize the application for the user.

In this world, your applications can trust another system component to securely provide user information, such as the user's name or email address, a manager's email address, or even a purchasing authorization limit. The user's information always arrives in the same simple format, regardless of the authentication mechanism, whether it's Microsoft® Windows® integrated authentication, forms-based authentication in a web browser, an X.509 client certificate, or something more exotic. Even if someone in charge of your company's security policy changes how users authenticate, you still get the information, and it's always in the same format. This is the utopia of claims-based identity that A Guide to Claims-Based Identity and Access Control describes.

This is the second edition of this popular guide. It has been extensively updated to include new features and changes to the underlying technologies; and extends the coverage to encompass Windows Azure® Access Control Service, REST-based service authentication, and the use of claims-based authentication in Microsoft SharePoint® 2010. As you'll see, claims provide an innovative approach for building all types of applications that must authenticate and authorize users.

This edition also has a set of associated Hands-on-Labs that will help you to better understand the way that the example application works, how you can extend it with additional functionality, and how you can implement some of the advanced scenarios described in the guide.

Downloads	Example code
Community	http://claimsid.codeplex.com
License	The samples for this content are licensed under the Microsoft Public License (Ms-PL) which can be found at http://www.microsoft.com/en-us/openness/resources/licenses.aspx#MPL

Authors and Contributors

Related Titles

Overview

This book gives you enough information to evaluate claims-based identity as a possible option when you are planning a new application or making changes to an existing one. It is intended for any architect, developer, or information technology (IT) professional who designs, builds, or operates Web applications and services that require identity information about their users.

Although claims-based identity has been possible for quite a while, there are now tools available that make it much easier for developers of Windows-based applications to implement it. These tools include the Windows Identity Foundation (WIF), Microsoft Active Directory® Federation Services (ADFS) v2, and Windows Azure Access Control Service (ACS). This book shows you when and how to use these tools in the context of some commonly occurring scenarios.

Contents of the Guide

An Introduction to Claims explains what a claim is and provides general rules on what makes good claims and how to incorporate them into your application. It's probably a good idea that you read this chapter before you move on to the scenarios.

Claims-Based Architectures shows you how to use claims with browser-based applications and smart client applications. In particular, the chapter focuses on how to implement single sign-on for your users, whether they are on an intranet or an extranet. This chapter is optional. You don't need to read it before you proceed to the scenarios.

Claims-Based Single Sign-On for the Web and Windows Azure is the starting point of the path that explores the implementation of single sign-on and federated identity. This chapter shows you how to implement single sign-on and single sign-out within a corporate intranet. Although this may be something that you can also implement with Integrated Windows Authentication, it is the first stop on the way to implementing more complex scenarios. It includes a section for Windows Azure™ technology platform that shows you how to move the claims-based application to the cloud.

Federated Identity for Web Applications shows how you can give your business partners access to your applications while maintaining the integrity of your corporate directory and theirs. In other words, your partners' employees can use their own corporate credentials to gain access to your applications.

Federated Identity with Windows Azure Access Control Service is the start of a parallel path that explores Windows Azure Access Control Service (ACS) in the context of single sign-on and federated identity. This chapter extends the scenarios described in the previous chapter to enable users to authenticate using social identity providers such as Google and Windows Live® network of Internet services.

Federated Identity with Multiple Partners is a variation of the federated identity scenario that shows you how to federate with partners who have no issuer of their own as well as those who do. It demonstrates how to use the ASP.NET MVC framework to create a claims-aware application.

Federated Identity with Multiple Partners and Windows Azure Access Control Service extends the scenarios described in the previous chapter to include ACS to give users additional choices for authentication that include social identity providers such as Google and Windows Live.

Claims Enabling Web Services is the first of a set of chapters that explore authentication for active clients rather than web browsers. This chapter shows you how to use the claims-based approach with web services, whereby a partner uses a smart client that communicates with identity providers and token issuers using SOAP-based services.

Securing REST Services shows how to use the claims-based approach with web services, whereby a partner uses a smart client that communicates with identity providers and token issuers using REST-based services.

Accessing REST Services from a Windows Phone Device shows how you can use claims-based techniques with Windows Phone™ wireless devices. It discusses the additional considerations that you must take into account when using claims-based authentication with mobile devices.

Claims-Based Single Sign-On for Microsoft SharePoint 2010 begins a path that explores how you can use claims-based identity techniques with Microsoft SharePoint 2010. This chapter shows how SharePoint web applications can use claims-based authentication with an external token issuer such as ADFS to enable access from both internal locations and externally over the web.

Federated Identity for SharePoint Applications extends the previous chapter to show how you can use federated identity techniques to enable users to authenticate using more than one identity provider and token issuer.

Audience Requirements

Although applications that use claims-based identity exist on many platforms, this book is written for people who work with Windows-based systems. You should be familiar with the Microsoft .NET Framework, ASP.NET, Windows Communication Foundation (WCF), Microsoft Active Directory®, and Microsoft Visual C#®.

System Requirements

You can either run the samples that illustrate the scenarios in the guide on your own system or you can create a realistic lab environment. Running the scenarios on your own system is very simple and has only a few requirements. These are the system requirements for running the scenarios on your system:

Microsoft Windows Vista® SP1, Windows 7, Windows Server 2008 (32-bit or 64-bit), or Windows Server 2008 R2 (32-bit or 64-bit)
Microsoft Internet Information Services (IIS) 7.0 or 7.5
Microsoft .NET Framework 4.0
Microsoft Visual Studio® 2010 (excluding Express editions)
Windows Azure Tools for Microsoft Visual Studio
Windows Identity Foundation

Running the scenarios in a realistic lab environment, with an instance of Active Directory Federation Services (ADFS) and Active Directory, requires an application server, ADFS, Active Directory, and a client system. Here are their system requirements.

Note: The example code for this guide and for the associated Hands-on-Labs was built using the Windows Azure Tools for Visual Studio version 1.3 (March 2011), and has also been tested using version 1.4 (August 2011) of the tools. The Dependency Checker utility provided with the examples will check for the presence of either the version 1.3 or version 1.4 release of the tools. If you have version 1.4 installed, you will be prompted to migrate the solutions to this version when you open them in Visual Studio.

Application Server

The application server requires the following:

Windows Server 2008 or Windows Server 2008 R2
Microsoft Internet Information Services (IIS) 7.0 or 7.5
Microsoft Visual Studio 2010 (excluding Express editions)
.NET Framework 4.0
Windows Identity Foundation

ADFS

The ADFS server requires the following:

Windows Server 2008 or Windows Server 2008 R2
Microsoft Internet Information Services (IIS) 7.0 or 7.5
.NET Framework 4.0
Microsoft SQL Server® 2005 or 2008 Express Edition

Active Directory

The Active Directory system requires Windows Server 2008 or Windows Server 2008 R2 with Active Directory installed.

Client Computer

The client computer requires Windows Vista or Windows 7 for active scenarios. Passive scenarios may use any web browser as the client that supports HTTP redirection.

Community

This guide, like many patterns & practices deliverables, is associated with a community site. On this community site, you can post questions, provide feedback, or connect with other users for sharing ideas. Community members can also help Microsoft plan and test future guides, and download additional content such as extensions and training material.

Future Plans

Additional content and plans will be published to the community site.

Feedback and Support

Questions? Comments? Suggestions? To provide feedback about this guide, or to get help with any problems, please visit the Community site. The message board on the community site is the preferred feedback and support channel because it allows you to share your ideas, questions, and solutions with the entire community. A Guide to Claims-based Identity and Access Control is a guidance offering, designed to be reused, customized, and extended. It is not a Microsoft product. Code-based guidance is shipped "as is" and without warranties. Customers can obtain support through Microsoft Support Services for a fee, but the code is considered user-written by Microsoft support staff.

Authors and Contributors

This guide was produced by the following individuals:

Program and Product Management: Eugenio Pace
Subject Matter Experts: Dominic Betts, Dominick Baier, Vittorio Bertocci, Keith Brown, and Matias Woloski
Development: Scott Densmore, Federico Boerr and Nicolas Paez
Test team: Masashi Narumoto, Rathi Velusamy and RaviShankar Chemudupati
Edit team: RoAnn Corbisier, Colin Campbell (Modeled Computation LLC), Roberta Leibovitz (Modeled Computation LLC), Alex Homer, Nancy Mitchell, and Tina Burden
Book design and illustrations: John Hubbard (eson), Ellen Forney and Veronica Ruiz
Release Management: Richard Burte

We want to thank the customers, partners, and community members who have patiently reviewed our early content and drafts. Among those, we want to highlight the exceptional contributions of Zulfiqar Ahmed, Michele Leroux Bustamante (IDesign), Pablo Mariano Cibraro (Tellago Inc), Hernan DeLahitte (DigitFactory), Pedro Felix, Tim Fischer (Microsoft Germany), Mario Fontana, David Hill, Doug Hiller, Jason Hogg, Ezequiel Jadib (Southworks), Brad Jonas, Seshadri Mani, Marcelo Mas, Vijayavani Nori, Krish Shenoy, Travis Spencer (www.travisspencer.com), Mario Szpuszta (Sr. Architect Advisor, Microsoft Austria), Chris Tavares, Peter M. Thompson, Todd West, Robert Bogue, Jonathan Cisneros, Shy Cohen, David Crawford, Laura Hunter, Chris Keyser, Jason Lee, Alik Levin, Nicolas Paez, Brian Puhl, Paul Schaeflein, Ken St. Cyr, Venky Veeraraghavan, Bill Wilder, Daz Wilkin, Jim Zimmerman, Steve Peschka, and Christian Nielsen.

Finally, we want to thank Stuart Kwan and Conrad Bayer from the Identity Division at Microsoft for their support throughout, and everyone who participated in our CodePlex community site.

Related Titles

Next | Home

Implementing Claims-Based Authentication with SharePoint Server 2010 (whitepaper)

David Crawford - MSFT — Sat, 08 Oct 2011 18:55:00 GMT

Check it out!

Published: September 27, 2011

This white paper describes how Web applications in Microsoft SharePoint Server 2010 can use claims-based authentication to provide authenticated access to entities that are external to your organization and enable multiple authentication types within a single zone.

It also provides many of the details related to setting up a trust configuration, an explanation of runtime considerations and management, configuration details, and programmatic implementations or use of the extensibility points that turn federated access into a federated SharePoint Server 2010 business solution. In addition, this white paper provides guidance in the following areas:

Overview of Claims-based Identity in SharePoint Server 2010
SharePoint Server 2010 with Active Directory Federation Services 2.0
Creating Multiple Claims Authentication Web Applications in a Single SharePoint Server 2010 Farm
Setting the Login Token Expiration Correctly for SharePoint Server 2010 SAML Claims Users
Creating a Custom Claims Provider
Migration of Users in Classic Mode to Trusted Provider Claims
How to Enable Tracing for SharePoint Server 2010 Claims
Trusted Identity Providers and User Profile Synchronization
Using Audiences with Claims-Based Sites
Implications of Claims Mode Authentication on Service Applications
Service Applications and the C2WTS
Using Active Authentication for Custom Development in SharePoint Server 2010 Claims Authentication Web Applications

Download the white paper

Implementing Claims Based Authentication with SharePoint Server 2010 (whitepaper) ( http://go.microsoft.com/fwlink/?LinkId=229109 )

( Please forgive the typos. Anywhere ADFS was in the paper was find-replaced with AD FS broke the code examples and powershell. I am working to get that revised currently. Also special thanks to a couple of the authors/contributers who are missing from the credits - Adam Conkle and Tyler Durham. )

“Demystified Series” Covers AzMan from A-to-Z on Channel 9

David Crawford - MSFT — Mon, 07 May 2007 20:16:00 GMT

“Demystified Series” Links:

Getting Started with AzMan
Programming AzMan – (Code Sample)
AzMan in the Enterprise – (Code Sample)

AzMan on Windows Server Code Name “Longhorn” and Windows Vista

(Thanks to Donovan Follette http://blogs.msdn.com/donovanf/ for this great content! )

How To: STS/Windows Authentication with ADAM/AD, Roles in AzMan with WCF

David Crawford - MSFT — Sat, 17 Feb 2007 00:40:00 GMT

I ran across the following article by Sam Gentile that may be of interest to you AzMan-ers... check it out.

http://codebetter.com/blogs/sam.gentile/archive/2006/05/26/145540.aspx

Regards,
David

Custom Authentication with AzMan - (A note on SID datatype)

David Crawford - MSFT — Wed, 23 Aug 2006 20:42:00 GMT

There are multiple ways to implement custom authentication with AzMan but if you are using an approach with custom SIDs (security identifiers), you should be aware of the data type for a SID.

Each sub authority is of type ULONG (32 bit) numeric which means numbers less than 4294967295 and no hex characters. So the format recommended for a Custom SID is S-1-9-1-1 through S-1-9-4294967295-4294967295. There is no validation based on sub authority either e.g. S-1-5 isn’t evaluated in AzMan any different from any other but you run the risk of collision with well known SIDs or prod AD SIDs . ( Thanks Sudheer! )

Regards,

David

Developing Applications Using Windows Authorization Manager White Paper Released!!!

David Crawford - MSFT — Thu, 17 Aug 2006 04:44:00 GMT

Check it out! http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetserv/html/AzManApps.asp...(read more)

Source Code for the Authorization Manager (AzMan) ASP.NET Role Provider Released

David Crawford - MSFT — Wed, 05 Jul 2006 20:44:00 GMT

Check out the Source Code for the Authorization Manager (AzMan) ASP.NET Role Provider

http://msdn.microsoft.com/asp.net/downloads/providers/

Under Deep Dive...

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnaspp/html/asp2prvdr03.asp

Differences Between the Published Source Code and the .NET Framework's AuthorizationStoreRoleProvider

The source code for the AuthorizationStoreRoleProvider is being released unchanged. This means you will not be able to compile it in its current state, because it contains calls to internal helper methods. However, you can reference the source code to see exactly how the provider maps role manager calls to AzMan.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnaspp/html/asp2prvdr01.asp?frame=true

Role Providers

Summary: Describes the design and operation of the various built-in providers that Microsoft ASP.NET 2.0 uses for state management services. (6 printed pages)

Click here to download the entire series in PDF format Microsoft ASP.NET Providers.pdf.

Microsoft ASP.NET 2.0 Providers: Introduction
Membership Providers
Role Providers
Site Map Providers
Session State Providers
Profile Providers
Web Event Providers
Web Parts Personalization Providers

Click here to download ProviderToolkitSamples.msi.

Find the file AuthStoreRoleProvider.cs.txt

Regards,

David

How to use ADAM Principals in Authorization Manager (AzMan) for Fine Grain Authorization

David Crawford - MSFT — Sat, 06 May 2006 18:39:00 GMT

Check out this really cool post from the AzMan Team blog! http://blogs.msdn.com/azman/archive/2006/05/06/591230.aspx The ADAM and AzMan teams got together to show how to use ADAM principals with AzMan. Sudheer, Authorization Manager Team, provides...(read more)

Random Thoughts on Optimization and Choices with Authorization Manager - Windows 2003 SP 1 - article

David Crawford - MSFT — Thu, 06 Apr 2006 04:16:00 GMT

Another new article by yours truly...

Random Thoughts on Optimization and Choices with Authorization Manager - Windows 2003 SP 1 http://blogs.msdn.com/dc995/articles/569487.aspx

ASP.NET 2.0 Membership Provider with Active Directory Application Mode - article

David Crawford - MSFT — Wed, 05 Apr 2006 05:26:00 GMT

I did some rambling on ASP.NET 2.0 Membership Provider with Active Directory Application Mode on the blog here... http://blogs.msdn.com/dc995/articles/568597.aspx so let me know what you think :)

Regards,
David

Regulatory Compliance Demystified: An Introduction to Compliance for Developers

David Crawford - MSFT — Fri, 24 Mar 2006 01:18:00 GMT

On a regular trip by Michael Howard's blog I saw the following - he highlighted a new white paper on Compliance for developers which is definately worth a read.

His blog is located here: http://blogs.msdn.com/michael_howard/default.aspx

Regulatory Compliance Demystified: An Introduction to Compliance for Developers

http://msdn.microsoft.com/security/default.aspx?pull=/library/en-us/dnsecure/html/regcompliance_demystified.asp

Welcome the AzMan Team Blog!

David Crawford - MSFT — Wed, 22 Feb 2006 16:50:00 GMT

The Authorization Manager Official Team Blog is now online check it out at: http://blogs.msdn.com/azman

AzMan Questions

David Crawford - MSFT — Wed, 22 Jun 2005 03:38:00 GMT

I am putting this place holder out for Windows 2003 Authorization Manager ( AzMan) questions.

If you have them, please ask them.

The AzMan (pronounced "A" "Z" "Man" ) update is included in the following:
Windows 2003 SP1 Admin Pak[^]

Windows 2000 Authorization Manager Runtime [^]

You will need to GAC the PIA. You should use the new interfaces for performance and all the benefits of the new interfaces such as the ability to create an emtpty client context and set the LDAPQueryDN supporting dynamic query groups in ADAM. This update to azman facilitates ADAM and ADFS integration environments. AzMan acts as a claims transformation engine when used in conjunction with ADFS. In each case, it is possible to build an empty client context and load sids (typically in the case of an ADAM authentication environment) or load roles and groups based on ADFS group claim assertions.

[Update: There was a change in packaging. The PIA is not included in the Win2k3 admin pack for WinXP. It is possible to create an interop from the azroles.dll or use the PIA from Win2k3 under %windir%\Microsoft.Net\Authman\(version) ]

MSDN Nuggets - Check'em out...

David Crawford - MSFT — Tue, 26 Apr 2005 04:44:00 GMT

Don't have the time to read a 10 - page how-to article or watch a full length webcast? Try an MSDN Nugget, a webcast that takes you step-by-step to discovering new functionality or exploring a hot developer topic, all in 10-15 minutes. View them online now or download for later reference. To view MSDN Nuggets you need Windows Media Player 9 Screen codec support on WMP 7 and above.

http://www.microsoft.com/uk/msdn/events/nuggets.aspx

There are all kinds of webcasts on developer topics ranging from working with ClickOnce and Generics to SQL and the new XML datatype...

TechNet Virtual Lab: Microsoft Office SharePoint Portal Server 2003

David Crawford - MSFT — Thu, 21 Apr 2005 05:30:00 GMT

TechNet Virtual Lab: Microsoft Office SharePoint Portal Server 2003

Get first-hand deployment experience through the Virtual Lab series. The Microsoft Office SharePoint Portal Server 2003 hands-on labs will teach you how to set up the portal, organize content on the portal, manage user permissions, create Web Parts for custom tasks, and much more.

Step into the Microsoft Office SharePoint Portal Server 2003 Virtual Lab for Free

It's simple — no complex setup or installation is required to try SharePoint Portal Server running in the full-featured TechNet Virtual Lab. You get a downloadable manual and a 90-minute block of time for each module. You can sign up for additional 90-minute blocks anytime.

As part of the TechNet Virtual Lab, you will have full access to SharePoint Portal Server's features and tools through ten modules:

•	An Introduction to Microsoft Office SharePoint Products and Technologies
•	Creating a Custom Site Definition for Microsoft Windows SharePoint Services
•	Creating a Web Part for Microsoft Office SharePoint Products and Technologies
•	Creating Connectible Web Parts for SharePoint Products and Technologies
•	Managing SharePoint Portal Server Content and Navigation
•	SharePoint Portal Server People and Personalization
•	SharePoint Products and Technologies Permissions Management
•	Using Microsoft Office FrontPage 2003 to Customize Windows SharePoint Services
•	Using Windows SharePoint Services with Microsoft Office Professional 2003 Applications
•	Using the Windows SharePoint Services Object Model

Getting Started

Step-by-Step Sign up Instructions

Before you get started, read the minimum system requirements and simple step-by-step sign-in instructions.

http://www.microsoft.com/technet/traincert/virtuallab/sps2003.mspx

Are you ready to experience SQL Server 2005?

David Crawford - MSFT — Tue, 05 Apr 2005 03:01:00 GMT

Announcing the launch of the SQL Server 2005 Virtual Hands on labs. In these labs, you will get to experience many of the new features in SQL Server 2005 including CLR integration, XML support and deep business intelligence integration.

Just follow the link and experience SQL Server 2005 for yourself...

Registration link:
http://msdn.demoservers.com/login.aspx?group=sql2005

Web Services Enhancements (WSE) SP3 Released!

David Crawford - MSFT — Tue, 01 Mar 2005 03:01:00 GMT

Web Services Enhancements (WSE)

Web Services Enhancements for Microsoft .NET (WSE) is a supported add-on to Microsoft Visual Studio .NET and the Microsoft .NET Framework providing developers the latest advanced Web services capabilities to keep pace with the evolving Web services protocol specifications.

Download Web Services Enhancements 2.0 Service Pack 3

WSE 2.0 simplifies the development and deployment of secure Web services by enabling developers using Visual Studio .NET and the .NET Framework to more easily apply security policy, establish long-running secure conversations, retrieve and validate security tokens and more. New features include a policy framework, enhanced security model, message-oriented programming model, and support for multiple hosting environments.

View the Web Services Enhancements 2.0 Service Pack 3 Readme file

View the Web Services Enhancements 2.0 Documentation

Download Web Services Enhancements 2.0 Service Pack 3 Redistribution Runtime MSI
WSE 2.0 may be redistributed as part of your solution, provided that redistribution is done using the WSE 2.0 redistribution MSI. When redistributing WSE, use this MSI with the corresponding application installer. If you prefer to not include this MSI in your setup, you may direct customers to this site so they can download the latest version of the runtime MSI.

http://msdn.microsoft.com/webservices/building/wse/

SQL 2005 Webcasts

David Crawford - MSFT — Fri, 25 Feb 2005 05:02:00 GMT

Check out the webcasts at http://msdn.microsoft.com/SQL/2005Webcasts/
There are a good number covering the SQL 2005 product line.

I thought that everyone interested in reporting would like these...

Introducing Reporting Services for SQL Server 2005—Level 200
Q&A from this webcast
Register today to find out more about the Reporting Services enhancements that will be available in SQL Server 2005.

TechNet Webcast: End-user, Ad Hoc Reporting in SQL Server 2005 Reporting Services—Level 200

http://msevents.microsoft.com/cui/WebCastEventDetails.aspx?culture=en-US&EventID=1032259394&CountryCode=US

Description:

End-user, ad hoc reporting was the most requested addition to Microsoft® SQL Server™ 2000 Reporting Services. The latest release of SQL Server 2005 Reporting Services includes this highly anticipated functionality. Join this webcast to learn all you need to know about this powerful enhancement to Reporting Services. The discussion will include an examination of its architecture as well as extensive demonstrations of how it works and what you can do with this capability.

Presenters: Brian Welcker, Group Program Manager; Carolyn Chau, Senior Program Manager, Microsoft SQL Server Reporting Services, Microsoft Corporation

BizTalk Adapter for MSMQ v2.0 Released!

David Crawford - MSFT — Wed, 16 Feb 2005 10:53:00 GMT

http://www.microsoft.com/downloads/details.aspx?FamilyId=CBA87D07-7F50-4D7B-A888-388D123F736E&displaylang=en

Overview

The BizTalk 2004 Adapter for MSMQ provides support for sending and receiving messages using MSMQ 2.0 and 3.0, and takes advantage of the new features in MSMQ 3.0. Major features of the adapter include support for:

System Requirements

Supported Operating Systems: Windows 2000, Windows Server 2003, Windows XP

Software Requirements
The minimum software requirements for an installation of Microsoft® BizTalk® 2004 Adapter for MSMQ on a single computer include the following:

Microsoft BizTalk Server 2004
For information about downloading and installing BizTalk Server 2004, see the BizTalk Server Downloads at http://go.microsoft.com/fwlink/?LinkId=41523.
Note: Although it is not required, it is strongly recommended that you install Microsoft BizTalk Server 2004, Service Pack 1. For a list of features in BizTalk Server 2004, Service Pack 1, see http://go.microsoft.com/fwlink/?LinkId=41585. To install BizTalk Server 2004, Service Pack 1, see http://go.microsoft.com/fwlink/?LinkId=41524.

Microsoft Windows® Message Queuing 2.0 or Message Queuing 3.0
Note: Make sure the Message Queuing service is started after you install it.
Important: BizTalk 2004 Adapter for MSMQ is not compatible with BizTalk Server 2000 or BizTalk Server 2002.

Check out the Interoperability Webcast Series

David Crawford - MSFT — Wed, 16 Feb 2005 08:47:00 GMT

a month-long webcast series focusing on interoperability – why it matters to the business, common strategies and methods, and guidance on specific implementation scenarios between the major platform players. We'll feature over 40 webcasts, cool giveaways, and brand-new technical guidance from experts such as Simon Guest, Dino Chiesa, and Navdip Bhachech.

https://www.interopmonth.com/home/

Great stuff... check it out...

BizTalk Server 2004 PowerToys by Erik Leaseburg

David Crawford - MSFT — Mon, 14 Feb 2005 04:25:00 GMT

Reference: http://blogs.msdn.com/luke/articles/365678.aspx
Document by Erik Leaseburg

BizTalk Server 2004 PowerToys

Get your BizTalk PowerToys now! Erik Leaseburg, a consultant with Microsoft Premier Services for the past five years and an expert in BizTalk Server, has collected the best PowerToys on the Web! Here they are!

Do you have a suggestion for a BizTalk Server PowerToy? Contact us!

BizTalk Server 2004 PowerToys Webcast
http://www.placeware.com/cc/microsoft/view?id=JUPBAG-40&pw=35DKTQ

Development PowerToys

Delimited File Schema Generator
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=b191423e-5db7-45aa-bf8c-3a38569cfafe
Generates a BizTalk flatfile schema from a well-formed character delimited flatfile.

Adapter Wizard
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=d3ac121c-8963-4735-b5e1-fc83b02f57c1
Wizard for creating custom send, receive, request-response and solicit-response adapters using the common adapter base classes and interfaces.
Webcast: http://www.placeware.com/cc/microsoft/view?id=JUPBAG-37&pw=35DKTQ

Pipeline Component Wizard
http://www.gotdotnet.com/Workspaces/Workspace.aspx?id=1d4f7d6b-7d27-4f05-a8ee-48cfcd5abf4a
Wizard to quickly build custom send and receive pipeline components.

Pipeline Testing Tools
<Installation Path>\SDK\Utilities\PipelineTools
The pipeline tools supplied with the Microsoft® BizTalk® Server 2004 Software Development Kit (SDK) enable you to verify that a pipeline is functioning correctly without having to configure the BizTalk Server environment, such as send/receive ports. You can also use the pipeline tools to:

Debug third-party pipeline components outside of the server environment.
Diagnose parsing engine error messages.
Experiment with different schemas without the burden of compiling, deploying, undeploying, and recompiling.
Explore flat file and XML assembler/disassembler behavior.
View disassembler output and discover which message context properties are promoted and their values.
Run send/receive pipelines without disassembler and assembler components (for example, you can view the output of the S/MIME decoder).
Make fine-grained performance measurements of the pipeline alone (rather than the entire messaging subsystem)

Configuration/Management PowerToys

BizTalk Assembly Viewer
<Installation Path>\Developer Tools\BtsAsmExt.dll
Register this windows explorer extension using regsvr32 "C:\Program Files\Microsoft BizTalk Server 2004\Developer Tools\BtsAsmExt.dll" to:

View the types in BizTalk assemblies and their attributes
Add and remove assemblies from the GAC
Search for BizTalk artifacts using View -> Explorer Bar -> BizTalk Server Search from the Windows Explorer menu

BizTalk Subscription Viewer
<Installation Path>\SDK\Utilities\BTSSubscriptionViewer.exe
The BTSSubscriptionViewer shows how BizTalk is matching the subscribers (Orchestrations and Send Ports) to items published/delivered to the MessagBox to view and troubleshoot binding, subscription and delivery issues.

BizTalk Management Tool
http://www.gotdotnet.com/workspaces/workspace.aspx?id=992ca223-553c-475a-ac87-da7ae2c9016a
A single tool for efficiently managing BizTalk deployment, configuration and administration tasks normally performed across 3 separate tools: BizTalk Explorer, BizTalk Server Administration and Health and Activity Tracking (HAT)
Webcast: http://www.placeware.com/cc/microsoft/view?id=JUPBAG-41&pw=35DKTQ

BizTalk Configuration Documenter
http://www.gotdotnet.com/workspaces/workspace.aspx?id=41c1faa9-13a6-478b-af81-d87ca946a222
This tool creates compiled help (*.chm) and Word 2003 XML files to quickly document the many artifacts (hosts, ports, orchestration diagrams, schemas, maps, pipelines, adapters, rule engine vocabularies and policies, and more) and their dependencies within a Biztalk Server 2004 environment.
Webcast: http://www.placeware.com/cc/microsoft/view?id=JUPBAG-42&pw=35DKTQ

Monitoring/Performance PowerToys

BizTalk Performance Monitor Counters
<%SystemRoot%>\system32\perfmon.msc (Start -> Run -> perfmon -> OK)
The messaging, TDDS and orchestration engines maintain several real-time and aggregate performance counters that are viewable within Performance Monitor. These counters can show how many messages, TDDS batches/events/records, and orchestration instances and transactions are being processed by each engine, respectively.
Definition: TDDS - Tracking Data Decode Service (A.K.A. the BAM Event Bus Service) - processes tracking data (streams) stored in a source database and persists that data in a query table format in the destination database.

BizTalk Performance Setting Tool
http://go.microsoft.com/fwlink/?LinkId=31290
The SvcClassSettings tool is used by BizTalk 2004 administrators who need a simple UI to fine tune the performance settings of XLANG/s orchestrations, InProcess Messaging hosts, Isolated Messaging hosts and the MSMQT adapter. High and low watermark, memorymark and sessionmark settings as well as the maxium receive interval can be adjusted. The included help file describes how changing each of these settings affects BizTalk’s performance.

More BizTalk PowerToys

BizTalk Competition Winners (September 2004)

BizTalk Server 2004 Management Tool (Paul Somers)
http://www.gotdotnet.com/workspaces/workspace.aspx?id=992ca223-553c-475a-ac87-da7ae2c9016a
BizTalk Server 2004 UDDI Publishing Wizard (Jesus Rodríguez)
http://www.gotdotnet.com/workspaces/workspace.aspx?id=e92cb86f-1c41-46d2-ac13-4185aec35001
BizTalk 2004 Nant Deployment Template (Scott Colestock)
http://www.gotdotnet.com/workspaces/workspace.aspx?id=d66e1651-98e5-4ef4-9158-ac030a9b8a32
BizTalk TIBCO Adapter (Pallavi Narayanaswamy)
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=8db5108a-7a0a-4137-b98f-de530ee8570b
Scheduled Orchestration Execution (Darrin Webber)
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=163b20c8-d5b9-4795-b1b9-8a775a1a7359

BizTalk Competition Entries

Design Patterns to Call External Services from Orchestrations (Guenole de Cadoudal)
http://www.gotdotnet.com/workspaces/workspace.aspx?id=8b18c3cc-2d75-4e21-9a3a-82bf91d9b5dc
Illustrating VRML and BizTalk Server 2004 (Nutan C.)
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=ce279dce-8e1d-45b6-b216-999cf15de8c7
BizTalk Server 2004 POP3 Adapter (Bill Chesnut)
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=38de5410-b207-4d1f-9926-e10a4ec366c2
Transactional .NET Adapter (Christof Classens)
http://www.gotdotnet.com/Workspaces/Workspace.aspx?id=15c441be-4cda-40db-a10e-0ac9b481abc8
ASP.NET and BizTalk Server Sample (Pierre Delahaye)
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=3bb6ee86-ed96-4ddc-8e7b-6792ff66bc9e
Vocabulary Upgrader for the Rules Engine (Marco Ensing)
http://www.gotdotnet.com/Workspaces/Workspace.aspx?id=236732a5-9f8d-48f7-a7af-25d9b6cc9b46
BizTalk Server 2004 Scheduling Service (Brian Loesgen)
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=cf64cccf-00de-4608-9a6f-ac4d25a6afbb
Orchestration Dependency Checking for Nant Build (Duncan Millard)
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=b7256718-2908-4444-ae4e-6edbf74c9ec7
Delimited File Schema Generator (Matt Milner)http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=b191423e-5db7-45aa-bf8c-3a38569cfafe
Sample Illustrating Cobol CopyBook and MQSeries (Arthur & Vladimir Nesterovsky)
http://www.gotdotnet.com/Workspaces/Workspace.aspx?id=1916cdaa-c014-4be0-a8b8-b8f5dd6b4f3e
BizTalk Server Tutorial (Valery Pryamikov)
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=50fbea11-4a23-46e2-bea8-cb05d38b7d50
Message Processing Patterns (Alan Smith)
http://www.gotdotnet.com/Workspaces/Workspace.aspx?id=7ae0a4fc-91e2-4429-bb6c-b28093ed7149
Limit the Number of Running Orchestration Instances in BizTalk 2004 Sample (Stephen W. Thomas)
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=80160526-9f08-4f30-837d-75506dd9402a
SQL Server Blob Adapter (Mike Webber)
http://www.gotdotnet.com/Community/UserSamples/Details.aspx?SampleGuid=189360ed-b216-45d2-b11a-b42828a3697d

How do you measure up with Reporting Services?

David Crawford - MSFT — Fri, 28 Jan 2005 09:39:00 GMT

http://assessment.learning.microsoft.com/test/home.asp

Evaluate

Introduction to Microsoft SQL Server™ 2000 Reporting Services

Take the Assessment Check High Scores

14 Free on-line BizTalk Server 2004 Hands-on labs available - see http://blogs.msdn.com/sspotts

David Crawford - MSFT — Fri, 28 Jan 2005 08:20:00 GMT

This is something that anyone interested in BizTalk 2004 should look at...

14 Free on-line BizTalk Server 2004 Hands-on labs available

14 BizTalk Hands-on Labs are now publicly available in the full-featured MSDN Virtual Lab at: http://msdn.demoservers.com/login.aspx?group=biztalk
See the following for details: http://blogs.msdn.com/sspotts

Welcome to my blog...

David Crawford - MSFT — Fri, 28 Jan 2005 03:50:00 GMT

I am with Microsoft Consulting Services, Public Sector. We provide government solutions as seen in the following link - http://www.microsoft.com/publicsector/ My practice is dedicated to helping government deliver capabilities and efficiencies to its constituents.

I will post here as often as I can offering tidbits of knowledge especially around the technologies listed in the categories of this site and responding to questions as often as possible. Given that I spend most of my time at client sites working with governments and partners, my first priority is to my clients. To engage with Microsoft Consulting Services, please contact your local Microsoft office (Malvern, PA Office: (610) 240 7000 in my case) or see your engagment manager.

With that said... Welcome again and I hope you find the information in this site useful.

Regards,
David Crawford

David Crawford's WebLog

A Guide to Claims-Based Identity and Access Control (2nd Edition)

Summary

Contents

Overview

Contents of the Guide

Audience Requirements

System Requirements

Application Server

ADFS

Active Directory

Client Computer

Community

Future Plans

Feedback and Support

Authors and Contributors

Related Titles

Implementing Claims-Based Authentication with SharePoint Server 2010 (whitepaper)

Download the white paper

“Demystified Series” Covers AzMan from A-to-Z on Channel 9

How To: STS/Windows Authentication with ADAM/AD, Roles in AzMan with WCF

Custom Authentication with AzMan - (A note on SID datatype)

Developing Applications Using Windows Authorization Manager White Paper Released!!!

Source Code for the Authorization Manager (AzMan) ASP.NET Role Provider Released

Contents

How to use ADAM Principals in Authorization Manager (AzMan) for Fine Grain Authorization

Random Thoughts on Optimization and Choices with Authorization Manager - Windows 2003 SP 1 - article

ASP.NET 2.0 Membership Provider with Active Directory Application Mode - article

Regulatory Compliance Demystified: An Introduction to Compliance for Developers

Welcome the AzMan Team Blog!

AzMan Questions

MSDN Nuggets - Check'em out...

TechNet Virtual Lab: Microsoft Office SharePoint Portal Server 2003

TechNet Virtual Lab: Microsoft Office SharePoint Portal Server 2003

Getting Started

Are you ready to experience SQL Server 2005?

Web Services Enhancements (WSE) SP3 Released!

Web Services Enhancements (WSE)

SQL 2005 Webcasts

BizTalk Adapter for MSMQ v2.0 Released!

http://www.microsoft.com/downloads/details.aspx?FamilyId=CBA87D07-7F50-4D7B-A888-388D123F736E&displaylang=en

Overview

System Requirements

Check out the Interoperability Webcast Series

BizTalk Server 2004 PowerToys by Erik Leaseburg

Reference: http://blogs.msdn.com/luke/articles/365678.aspx Document by Erik Leaseburg

BizTalk Server 2004 PowerToys

How do you measure up with Reporting Services?

Evaluate

14 Free on-line BizTalk Server 2004 Hands-on labs available - see http://blogs.msdn.com/sspotts

Welcome to my blog...

Reference: http://blogs.msdn.com/luke/articles/365678.aspx
Document by Erik Leaseburg