Justin Smith's Blog

Today I’m excited to announce a major update to ACS. It’s available in our labs environment: http://portal.appfabriclabs.com . Keep in mind that there is no SLA around this release, but accounts and usage of the service are free while it is in the labs...

Now that we have a mgmt tool , I can provide you with a template so you can setup the ACS part of the WLID / Facebook Connect sample with less effort. Here’s the XML configuration: < ServiceNamespace xmlns:xsi ="http://www.w3.org/2001/XMLSchema-instance...

I’ve received several requests regarding ACS and Windows Live ID integration for websites. This post describes what you can do with ACS and Windows Live ID today (with the new release of ACS). It takes a bit of code, but the integration is pretty straightforward...

The November 2009 CTP of ACS integrates with Active Directory Federation Server v2. ACS can act as a bridge between enterprise identity and REST web services. The runtime flow is pretty simple (shown below). At runtime, the client app requests a SAML...

Since releasing the new version of ACS on Nov 5, we’ve received quite a bit of feedback that we should provide a UI for managing ACS rules/scopes/issuers/token policies. In response, Cyrus put together a little WPF app that does the trick. It’s available...

The Access Control Service uses a new community protocol and format that are now posted on google groups: http://groups.google.com/group/wrap-wg http://groups.google.com/group/oauth-wrap-wg Check em out. If you are a security geek, it’s worth the read...

Today is a big day for the Access Control Service team. M7 is now live. There are a few huge changes: It is running on top of Azure (fabric and storage) We incorporated a new community driven protocol and token format (Web Resource Authorization Protocol...

In my last post I outlined the changes that were coming in the Access Control Service. Since that post, I’ve received many questions about how ACS will integrate with ADFS v2. Below is a link to a simple demo I put together to highlight this very cool...

We are in the process of making some key design changes to the Access Control Service (ACS) for our PDC release this fall. I think these changes will bring tremendous benefits to ACS customers in the near-term, but the changes break all ACS-related code...

Over the past few months, several people have asked me how to accept client certificates on a service. The scenario is something like the following: A web service owner wants to limit access to the service to authorized clients authorized clients identify...

For some reason the slide deck I presented at Mix didn’t show up on the Mix 09 website. If you are interested in the deck, see the link below.

Today I caught up on some press material on Azure Services. For those that haven’t seen it, the picture version of Azure Services is below: One article published in late February popped out at me: http://blogs.zdnet.com/microsoft/?p=2173 . Among other...

This week at Mix I demonstrated a new experimental client API (TokenClient) for interacting with the Access Control Service (ACS). The purpose of this API is to simplify the developer interaction with the ACS Security Token Service. It still uses WS-Trust...

The Geneva Framework FAM is the simplest way to experience ACS and ASP.NET. My friends in platform evangelism wrote a cool app that uses ACS, LiveID, and the Geneva Framework. It's called issuetracker, and I recommend checking it out: http://www.codeplex...

My co-worker Jenny Lo wrote a good post on how to get started with .NET Services. If you are wondering how to get started this should do the trick. https://blogs.msdn.com/jennylo/archive/2008/11/04/a-step-by-step-guide-from-creating-a-net-services-solution...

In my previous post I described at a high level a simple scenario that leverages the Access Control Service. Now I'd like to describe the interactions between messaging participants and the .NET Access Control Service. Recall the scenario: a multi-tenant...

To the already initiated claims disciples, the Access Control Service is a multi-tenant Resource STS. The behavior of each STS is determined by simple rules - the rules control how each STS transforms claims . To those not already initiated in the claims...

Today we announced the CTP release of .NET Services! For quite a while now, I have been working on this project. It's great to see it announced and to have customers use our services. .NET Services consist of three services: the Service Bus, the Workflow...

Yesterday we released a new version of BizTalk Services (R12). Over the next few weeks I'll be updating my blog with descriptions of the identity related features we added in this release. For now I'd like to describe one of the most obvious changes to...

One of the little known features of BizTalk Services is it's support for metadata. There's a sample in the SDK (default path: C:\Program Files\Microsoft BizTalk Services SDK\Samples\Communication\ExploringFeatures\Metadata\MetadataExchange\CS30) that...

This week I started a new job at Microsoft - I've moved from Developer and Platform Evangelism to the Connected Systems Division. I'm now a program manager on the BizTalk Services team ( http://biztalk.net ). It was hard to leave DPE, but this seems like...

I just posted a new screencast on Channel 9: http://channel9.msdn.com/Showpost.aspx?postid=386824 . It's purpose is to show off the power of claims and claims transformation, especially in a hosted service like BizTalk Services.

The identity provider in BizTalk Services is a way for applications to delegate identity and access control to a hosted service. In other words, an application can use BizTalk Services to answer the all-important question "Who are you and what are...

A little while ago I ran into an interesting set of errors that may be of interest to you. Consider the following service contract snippet: [OperationContract] [WebGet(UriTemplate= "foobar/{value}" )] String GetData(String value ); ...

I'm not prone to publish non-techie topics on this blog, but I can't help this one :). I'm often asked what life is like at Microsoft, and this video pretty much sums it up... http://on10.net/blogs/tina/Life-At-Microsoft/