1. virtual techdays INDIA │ 9-11 February 2011 virtual techdays AppFabric Futures – Access Control Service Niraj Bhatt │ Windows Azure MVP

2.  Security Challenges  Developer  IT Ops  Business  Claims Based Identity  IP, RP and FP  WIF, ADFS, ACS  Demos virtual techdays INDIA │ 9-11 February 2011 S E S S I O N A G E N D A

3. virtual techdays INDIA │ 9-11 February 2011 Security Challenges How many of you love login screens?

4. virtual techdays INDIA │ 9-11 February 2011 Security Challenges Developer Challenges Applications are identity prisoners

5. virtual techdays INDIA │ 9-11 February 2011 Security Challenges IT Pro Challenges  Strategic Application  40,000+ Users  5000 Concurrent Users  TBs data and growing  No NLBs No Clusters  SQL 2000  ASP / ASP.NET 1.1 – In Proc Session Cutting 80% of Ops issues How ??? Cutting 80% of Ops issues How ???

6. virtual techdays INDIA │ 9-11 February 2011 Security Challenges IT Pro Challenges Option A Option B

7. virtual techdays INDIA │ 9-11 February 2011 Security Challenges Business Challenges – ABC Corp  Alice wants to sell ABC’s bikes  Signs agreements on behalf of her bike’s shop  Sends a list of her employees who can make purchase  ABC issues Username / Password for the all on the list

8. virtual techdays INDIA │ 9-11 February 2011 Security Challenges Business Challenges – ABC Corp Employee at Alice’s shop

9. virtual techdays INDIA │ 9-11 February 2011 Security Challenges Business Challenges – ABC Corp No value addition for past 6 months… I was promised a Salary hike after 6 months FIRES  Multiple Suppliers  Multiple Agreements  Multiple Lists  Multiple Logins  Multiple Policies

10. virtual techdays INDIA │ 9-11 February 2011 Security Challenges

11. virtual techdays INDIA │ 9-11 February 2011 Learning from other disciplines

12. virtual techdays INDIA │ 9-11 February 2011 Learning from other disciplines

13. virtual techdays INDIA │ 9-11 February 2011 Learning from other disciplines

14. virtual techdays INDIA │ 9-11 February 2011 Learning from other disciplines

15. virtual techdays INDIA │ 9-11 February 2011 Learning from other disciplines

16. virtual techdays INDIA │ 9-11 February 2011 Learning from other disciplines

17. virtual techdays INDIA │ 9-11 February 2011 Lessons learned ???  Always carry your license (age proof) to the beer bar  Relying on a trusted External Entity (Identity Provider) for  Authenticating users  Providing user attributes (claims)  Saves us from Identity nightmares

18. virtual techdays INDIA │ 9-11 February 2011 IP, RP, Tokens, WIF, ADFS

19. virtual techdays INDIA │ 9-11 February 2011 virtual techdays DEMO Outsourcing authentication to Identity Provider (STS)

20. virtual techdays INDIA │ 9-11 February 2011 Access Control Service - Federation Provider

21. virtual techdays INDIA │ 9-11 February 2011 virtual techdays DEMO Using Access Control Service as a Federation Provider

22.  Vittorio Bertocci  http://blogs.msdn.com/b/vbertocci/ http://blogs.msdn.com/b/vbertocci/  MSDN Article  Re-Introducing the Windows Azure AppFabric Access Control Service  AppFabric Labs & Tools  https://portal.appfabriclabs.com/Default.aspx https://portal.appfabriclabs.com/Default.aspx  https://aclaims.accesscontrol.appfabriclabs.com/v2/mgmt/web https://aclaims.accesscontrol.appfabriclabs.com/v2/mgmt/web  http://acs.codeplex.com/ http://acs.codeplex.com/  http://code.msdn.microsoft.com/TokenVisualizerCtrl/ http://code.msdn.microsoft.com/TokenVisualizerCtrl/  http://code.msdn.microsoft.com/SelfSTS http://code.msdn.microsoft.com/SelfSTS virtual techdays INDIA │ 9-11 February 2011 References

23. virtual techdays INDIA │ 9-11 February 2011 Thank you http://nirajrules.wordpress.com niraj@indiamvps.net 23