ADatum Assets ADatum REST Web Svc ADatum REST Web Svc

ADatum ACS Service Namespace ADatum ACS Service Namespace ADatum REST Web Service 2. Request Access Token (Claims) 4. Return Access Token (output claims from 3) 5. Send Message w/ Access Token 0. Secret exchange; periodically refreshed ADatum Customer 1. Define access control rules for a customer 6.Token Validated 3. Map input claims to output claims based on access control rules

Authorization Server Protected Resource Protected Resource 2. Request Access Token (Claims) 4. Return Access Token (output claims from 3) 5. Send Message w/ Access Token 0. Secret exchange; periodically refreshed Client 1. Define access control rules for a customer 6.Token Validated 3. Map input claims to output claims based on access control rules

ACS 101 Demo

Service Namespace ScopeIssuerRule SetRule Token Policy

').../issuers...(' ').../rulesets...(' ').../rules...(' ').../tokenpolicies...(' ')

ADatum ACS Service Namespace ADatum ACS Service Namespace ADatum REST Web Service ADatum Customer

ACS Enterprise Integration

ADatum ACS Service Namespace ADatum ACS Service Namespace ADatum REST Web Service ADatum Customer ACS Service Namespace ADatum Customer’s Partner ADatum Customer’s Partner

ACS Simple Delegation

>>FUTURE

Built by Developers for Developers….

© 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.