MSDN Webcast: Windows Communication Foundation Top to Bottom (Part 11 of 15): Federated Security (Level 200)  

The security model in Windows Communication Foundation (WCF) supports a rich, claims-based approach to authorization. Virtually any security token can be represented as a set of claims, including tokens that contain Windows credentials, username and password, or X509 certificates. Normalized claims are at the heart of any federated security model, allowing developers to decouple how tokens are mapped to a set of domain-specific claims and how users are authorized based on those claims. In this webcast, we show you how to build a claims-based security model using custom authorization policies, permissions, and attributes. Learn how this plays into a federated model, allowing you to decouple authentication and authorization from your business service implementations using WSFederationHttpBinding. We also discuss SAML tokens, describe how to create custom claims, and examine how the flow of communication works between clients, token issuers, and services.

Presenter: Michele Leroux Bustamante, Chief Architect, IDesign Inc.

Michèle Leroux Bustamante is chief architect of IDesign Inc., Microsoft Regional Director for San Diego, Microsoft Most Valuable Professional (MVP) for XML Web services, and BEA Technical Director. At IDesign, Michèle provides training, mentoring, and high-end architecture consulting services, focusing on Web services, scalable and secure architecture design for Microsoft .NET, interoperability, and globalization architecture. Michèle is also events director for the International Association of Software Architects (IASA). Visit www.thatindigogirl.com for more information on her book, Learning WCF (O'Reilly, 2007).

If you have questions or feedback, contact us.