How To: STS/Windows Authentication with ADAM/AD, Roles in AzMan with WCF

 I ran across the following article by Sam Gentile that may be of interest to you AzMan-ers... check it out.

http://codebetter.com/blogs/sam.gentile/archive/2006/05/26/145540.aspx

Regards,
David

Custom Authentication with AzMan - (A note on SID datatype)

There are  multiple ways to implement custom authentication with AzMan but if you are using an approach with custom SIDs (security identifiers), you should be aware of the data type for a SID.

Each sub authority is of type ULONG (32 bit) numeric which means numbers less than 4294967295 and no hex characters. So the format recommended for a Custom SID is S-1-9-1-1 through S-1-9-4294967295-4294967295. There is no validation based on sub authority either e.g. S-1-5 isn’t evaluated in AzMan any different from any other but you run the risk of collision with well known SIDs or prod AD SIDs . ( Thanks Sudheer! )

Regards,

David

Developing Applications Using Windows Authorization Manager White Paper Released!!!

Check it out!

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetserv/html/AzManApps.asp

Source Code for the Authorization Manager (AzMan) ASP.NET Role Provider Released

http://msdn.microsoft.com/asp.net/downloads/providers/

Under Deep Dive...

Regards,

David

How to use ADAM Principals in Authorization Manager (AzMan) for Fine Grain Authorization

Check out this really cool post from the AzMan Team blog! http://blogs.msdn.com/azman/archive/2006/05/06/591230.aspx 

The ADAM and AzMan teams got together to show how to use ADAM principals with AzMan.  Sudheer, Authorization Manager Team, provides a description and csharp / C# code from that effort. Note: you need to be using Windows 2003 SP 1, the updated Win2k3 Admin Pack for XP or the updated Win2k backport. 

Regards,
David

Random Thoughts on Optimization and Choices with Authorization Manager - Windows 2003 SP 1 - article

Another new article by yours truly...

Random Thoughts on Optimization and Choices with Authorization Manager - Windows 2003 SP 1  http://blogs.msdn.com/dc995/articles/569487.aspx
 

ASP.NET 2.0 Membership Provider with Active Directory Application Mode - article

I did some rambling on ASP.NET 2.0 Membership Provider with Active Directory Application Mode on the blog here...  http://blogs.msdn.com/dc995/articles/568597.aspx so let me know what you think :)

Regards,
David

Regulatory Compliance Demystified: An Introduction to Compliance for Developers

On a regular trip by Michael Howard's blog I saw the following - he highlighted a new white paper on Compliance for developers which is definately worth a read.

His blog is located here: http://blogs.msdn.com/michael_howard/default.aspx 

Regulatory Compliance Demystified: An Introduction to Compliance for Developers

http://msdn.microsoft.com/security/default.aspx?pull=/library/en-us/dnsecure/html/regcompliance_demystified.asp

Welcome the AzMan Team Blog!

The Authorization Manager Official Team Blog is now online check it out at: http://blogs.msdn.com/azman

AzMan Questions

I am putting this place holder out for Windows 2003 Authorization Manager ( AzMan) questions.

If you have them,  please ask them.

The AzMan (pronounced "A" "Z" "Man" ) update is included in the following:
Windows 2003 SP1 Admin Pak[^]

Windows 2000 Authorization Manager Runtime [^]

You will need to GAC the PIA. You should use the new interfaces for performance and all the benefits of the new interfaces such as the ability to create an emtpty client context and set the LDAPQueryDN supporting dynamic query groups in ADAM. This  update to azman facilitates ADAM and ADFS integration environments. AzMan acts as a claims transformation engine when used in conjunction with ADFS. In each case, it is possible to build an empty client context and load sids (typically in the case of an ADAM authentication environment) or load roles and groups based on ADFS group claim assertions.

[Update: There was a change in packaging. The PIA is not included in the Win2k3 admin pack for WinXP. It is possible to create an interop from the azroles.dll or use the PIA from Win2k3 under %windir%\Microsoft.Net\Authman\(version) ]

MSDN Nuggets - Check'em out...

Don't have the time to read a 10 - page how-to article or watch a full length webcast? Try an MSDN Nugget, a webcast that takes you step-by-step to discovering new functionality or exploring a hot developer topic, all in 10-15 minutes. View them online now or download for later reference. To view MSDN Nuggets you need Windows Media Player 9 Screen codec support on WMP 7 and above.

http://www.microsoft.com/uk/msdn/events/nuggets.aspx 

There are all kinds of webcasts on developer topics ranging from working with ClickOnce and Generics to SQL and the new XML datatype...

TechNet Virtual Lab: Microsoft Office SharePoint Portal Server 2003

TechNet Virtual Lab: Microsoft Office SharePoint Portal Server 2003