Embed Size (px)
DESCRIPTION
Federerad säkerhet och identitetshantering – lokalt och i molnet. Robert Folkesson - 2011-12-01. Federerad autentisering. claims name: Robert, roles : … …. Security Token Service. signerad. Trust. 1. Token. 2. Client. Relying Party. Active Directory. claims name: Robert, - PowerPoint PPT Presentation
Citation preview
Federerad säkerhet och identitetshantering –
lokalt och i molnet
Robert Folkesson - 2011-12-01
Federerad autentisering
Client Relying Party
SecurityTokenService
1
2
Token
signerad
claims name: Robert, roles : … …
Trust
Active Directory
Client Relying Party
DomainController
1
2
Kerberos Service Ticket
proof
claims name: Robert, groups : … …
Trust
Vad händer när applikation ligger utanför domänen?
Client
KerberosServiceTicket
DomainController
Client
Token
DomainController
Trust
Token
SecurityTokenService
Demo
Single Sign On med WIFoch ”fusk”-ADFS 2
Trust
Federation Gateway
Moln-applikation
Trust
Federation Gateway
SecurityTokenService
SecurityTokenService
SecurityTokenService
Federation med Azure Access Control Service
Olika format / protokoll in(WS-Trust, WS-Federation, WRAP, OpenId)
Ett format ut
REST API,Adminverktyg
Rulesengine
DEMO
Federation med Azure Access Control Service
Resurser
Claims-based identity and access control
http://tinyurl.com/claimsguide
ResurserProgramming Windows Identity Foundation
http://www.amazon.com/Programming-Windows-Identity-Foundation-Dev/dp/0735627185
Resurser
www.microsoft.com/wif
www.microsoft.com/download/en/details.aspx?displaylang=en&id=14347
acs.codeplex.com
www.fabrikamshipping.com
WIF-startsida:
Identity developertraining kit:
ASC på codeplex:
Fabrikam Shipping:
