• Justin Smith's Blog

    Major update to ACS now available

    • 4 Comments
    Today I’m excited to announce a major update to ACS. It’s available in our labs environment: http://portal.appfabriclabs.com . Keep in mind that there is no SLA around this release, but accounts and usage of the service are free while it is in the labs...
  • Justin Smith's Blog

    Mgmt Config sample for WLID / Facebook Connect sample

    • 2 Comments
    Now that we have a mgmt tool , I can provide you with a template so you can setup the ACS part of the WLID / Facebook Connect sample with less effort. Here’s the XML configuration: < ServiceNamespace xmlns:xsi ="http://www.w3.org/2001/XMLSchema-instance...
  • Justin Smith's Blog

    ACS integration with Windows Live ID & Facebook Connect

    • 15 Comments
    I’ve received several requests regarding ACS and Windows Live ID integration for websites. This post describes what you can do with ACS and Windows Live ID today (with the new release of ACS). It takes a bit of code, but the integration is pretty straightforward...
  • Justin Smith's Blog

    ACS SAML / ADFS v2 Sample

    • 11 Comments
    The November 2009 CTP of ACS integrates with Active Directory Federation Server v2. ACS can act as a bridge between enterprise identity and REST web services. The runtime flow is pretty simple (shown below). At runtime, the client app requests a SAML...
  • Justin Smith's Blog

    Management Browser uploaded

    • 4 Comments
    Since releasing the new version of ACS on Nov 5, we’ve received quite a bit of feedback that we should provide a UI for managing ACS rules/scopes/issuers/token policies. In response, Cyrus put together a little WPF app that does the trick. It’s available...
  • Justin Smith's Blog

    Web Resource Authorization Protocol (WRAP) and Simple Web Token (SWT) on google groups

    • 2 Comments
    The Access Control Service uses a new community protocol and format that are now posted on google groups: http://groups.google.com/group/wrap-wg http://groups.google.com/group/oauth-wrap-wg Check em out. If you are a security geek, it’s worth the read...
  • Justin Smith's Blog

    Access Control Service (M7) released today!

    • 0 Comments
    Today is a big day for the Access Control Service team. M7 is now live. There are a few huge changes: It is running on top of Azure (fabric and storage) We incorporated a new community driven protocol and token format (Web Resource Authorization Protocol...
  • Justin Smith's Blog

    Access Control Service and ADFS v2 demo

    • 0 Comments
    In my last post I outlined the changes that were coming in the Access Control Service. Since that post, I’ve received many questions about how ACS will integrate with ADFS v2. Below is a link to a simple demo I put together to highlight this very cool...
  • Justin Smith's Blog

    Access Control Service – Roadmap for PDC and Beyond

    • 4 Comments
    We are in the process of making some key design changes to the Access Control Service (ACS) for our PDC release this fall. I think these changes will bring tremendous benefits to ACS customers in the near-term, but the changes break all ACS-related code...
  • Justin Smith's Blog

    Client Certificate Credential Verification

    • 0 Comments
    Over the past few months, several people have asked me how to accept client certificates on a service. The scenario is something like the following: A web service owner wants to limit access to the service to authorized clients authorized clients identify...
  • Justin Smith's Blog

    Mix 09 Deck

    • 1 Comments
    For some reason the slide deck I presented at Mix didn’t show up on the Mix 09 website. If you are interested in the deck, see the link below.
  • Justin Smith's Blog

    Interesting article on Azure Services

    • 1 Comments
    Today I caught up on some press material on Azure Services. For those that haven’t seen it, the picture version of Azure Services is below: One article published in late February popped out at me: http://blogs.zdnet.com/microsoft/?p=2173 . Among other...
  • Justin Smith's Blog

    TokenClient (Mix) introduction

    • 2 Comments
    This week at Mix I demonstrated a new experimental client API (TokenClient) for interacting with the Access Control Service (ACS). The purpose of this API is to simplify the developer interaction with the ACS Security Token Service. It still uses WS-Trust...
  • Justin Smith's Blog

    Federated website sample

    • 1 Comments
    The Geneva Framework FAM is the simplest way to experience ACS and ASP.NET. My friends in platform evangelism wrote a cool app that uses ACS, LiveID, and the Geneva Framework. It's called issuetracker, and I recommend checking it out: http://www.codeplex...
  • Justin Smith's Blog

    Setting up a solution in .NET Services

    • 0 Comments
    My co-worker Jenny Lo wrote a good post on how to get started with .NET Services. If you are wondering how to get started this should do the trick. https://blogs.msdn.com/jennylo/archive/2008/11/04/a-step-by-step-guide-from-creating-a-net-services-solution...
  • Justin Smith's Blog

    Access Control Service - Common Interaction Model

    • 1 Comments
    In my previous post I described at a high level a simple scenario that leverages the Access Control Service. Now I'd like to describe the interactions between messaging participants and the .NET Access Control Service. Recall the scenario: a multi-tenant...
  • Justin Smith's Blog

    Access Control Service - A Simple Scenario

    • 2 Comments
    To the already initiated claims disciples, the Access Control Service is a multi-tenant Resource STS. The behavior of each STS is determined by simple rules - the rules control how each STS transforms claims . To those not already initiated in the claims...
  • Justin Smith's Blog

    .NET Services - Launch at PDC 08

    • 0 Comments
    Today we announced the CTP release of .NET Services! For quite a while now, I have been working on this project. It's great to see it announced and to have customers use our services. .NET Services consist of three services: the Service Bus, the Workflow...
  • Justin Smith's Blog

    Access Control rule changes in BizTalk Services R12

    • 1 Comments
    Yesterday we released a new version of BizTalk Services (R12). Over the next few weeks I'll be updating my blog with descriptions of the identity related features we added in this release. For now I'd like to describe one of the most obvious changes to...
  • Justin Smith's Blog

    BizTalk Services and "Add Service Reference"

    • 1 Comments
    One of the little known features of BizTalk Services is it's support for metadata. There's a sample in the SDK (default path: C:\Program Files\Microsoft BizTalk Services SDK\Samples\Communication\ExploringFeatures\Metadata\MetadataExchange\CS30) that...
  • Justin Smith's Blog

    First week at the new job

    • 2 Comments
    This week I started a new job at Microsoft - I've moved from Developer and Platform Evangelism to the Connected Systems Division. I'm now a program manager on the BizTalk Services team ( http://biztalk.net ). It was hard to leave DPE, but this seems like...
  • Justin Smith's Blog

    Robots and BizTalk Services

    • 2 Comments
    I just posted a new screencast on Channel 9: http://channel9.msdn.com/Showpost.aspx?postid=386824 . It's purpose is to show off the power of claims and claims transformation, especially in a hosted service like BizTalk Services.
  • Justin Smith's Blog

    Claims and the Calculator sample in the BizTalk Services SDK

    • 1 Comments
    The identity provider in BizTalk Services is a way for applications to delegate identity and access control to a hosted service. In other words, an application can use BizTalk Services to answer the all-important question "Who are you and what are...
  • Justin Smith's Blog

    enableWebScript, UriTemplate, and HTTP methods

    • 4 Comments
    A little while ago I ran into an interesting set of errors that may be of interest to you. Consider the following service contract snippet: [OperationContract] [WebGet(UriTemplate= "foobar/{value}" )] String GetData(String value ); ...
  • Justin Smith's Blog

    Life at Microsoft

    • 1 Comments
    I'm not prone to publish non-techie topics on this blog, but I can't help this one :). I'm often asked what life is like at Microsoft, and this video pretty much sums it up... http://on10.net/blogs/tina/Life-At-Microsoft/
Page 1 of 3 (60 items) 123