<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.msdn.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Claim types: a coarse taxonomy</title><link>http://blogs.msdn.com/b/vbertocci/archive/2008/05/05/claim-types-a-coarse-taxonomy.aspx</link><description>In short. I make some considerations about what kind of info ends up in a claim, and the things we expect will happen when those info are processed. I then describe what I call infrastructure claims, for the lack of a better term, and their role in authorization;</description><dc:language>en-US</dc:language><generator>Telligent Evolution Platform Developer Build (Build: 5.6.50428.7875)</generator><item><title>What goes into claims</title><link>http://blogs.msdn.com/b/vbertocci/archive/2008/05/05/claim-types-a-coarse-taxonomy.aspx#9590822</link><pubDate>Wed, 06 May 2009 11:53:51 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9590822</guid><dc:creator>Vibro.NET</dc:creator><description>&lt;p&gt;digg_url = &amp;quot;&lt;a rel="nofollow" target="_new" href="http://blogs.msdn.com/vbertocci/archive/2009/05/05/what-goes-into-claims.aspx&amp;quot;;digg_title"&gt;http://blogs.msdn.com/vbertocci/archive/2009/05/05/what-goes-into-claims.aspx&amp;quot;;digg_title&lt;/a&gt;&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=9590822" width="1" height="1"&gt;</description></item><item><title>A visual tour of the .NET Access Control service via Azure Services Management Console</title><link>http://blogs.msdn.com/b/vbertocci/archive/2008/05/05/claim-types-a-coarse-taxonomy.aspx#9300841</link><pubDate>Fri, 09 Jan 2009 02:13:34 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:9300841</guid><dc:creator>Vibro.NET</dc:creator><description>&lt;p&gt;Happy Western-new year! Hope you enjoyed your holidays, and that you're back to work recharged &amp;amp;amp;&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=9300841" width="1" height="1"&gt;</description></item><item><title>Authorization Claims</title><link>http://blogs.msdn.com/b/vbertocci/archive/2008/05/05/claim-types-a-coarse-taxonomy.aspx#8762555</link><pubDate>Mon, 21 Jul 2008 23:39:27 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:8762555</guid><dc:creator>Erics Blog</dc:creator><description>&lt;p&gt;When creating my WCF version of a Security Token Service, I also created a flexible way to add claims&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=8762555" width="1" height="1"&gt;</description></item><item><title>re: Claim types: a coarse taxonomy</title><link>http://blogs.msdn.com/b/vbertocci/archive/2008/05/05/claim-types-a-coarse-taxonomy.aspx#8462439</link><pubDate>Tue, 06 May 2008 10:41:39 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:8462439</guid><dc:creator>Vittorio Bertocci - MSFT</dc:creator><description>&lt;p&gt;Seems a good point; however the phrase &amp;quot;The RP will process the claim&amp;quot; does not imply in anyway that this is the first thing that the RP will do; in fact, if the Rp is processing the claim you can safely assume that the issuer check has already been (succesfully) performed. Note also that such a check would not be perfomed by using a claim, but by checking the signature.&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=8462439" width="1" height="1"&gt;</description></item><item><title>re: Claim types: a coarse taxonomy</title><link>http://blogs.msdn.com/b/vbertocci/archive/2008/05/05/claim-types-a-coarse-taxonomy.aspx#8462340</link><pubDate>Tue, 06 May 2008 09:26:00 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:8462340</guid><dc:creator>Eric Norman</dc:creator><description>&lt;P&gt;Well, I must be a third kind of guy other that FED or WI. &amp;nbsp;What I think is that the first and main thing a RP processes is the claimant; i.e. the entity making the claim. &amp;nbsp;This is necessary because a RP want's to decide whether to rely (on the claim).&lt;/P&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=8462340" width="1" height="1"&gt;</description></item><item><title>Blogging software misfired...</title><link>http://blogs.msdn.com/b/vbertocci/archive/2008/05/05/claim-types-a-coarse-taxonomy.aspx#8461935</link><pubDate>Tue, 06 May 2008 05:13:17 GMT</pubDate><guid isPermaLink="false">91d46819-8472-40ad-a661-2c78acb4018c:8461935</guid><dc:creator>Vibro.NET</dc:creator><description>&lt;p&gt;...or I clicked &amp;quot;Publish&amp;quot; instead of &amp;quot;Save Draft&amp;quot;. Anyway, the net result is that a post was erroneously&lt;/p&gt;
&lt;img src="http://blogs.msdn.com/aggbug.aspx?PostID=8461935" width="1" height="1"&gt;</description></item></channel></rss>