1. Christian Paquin Senior Program Manager Microsoft Corporation SESSION CODE: SIA305

4. Identity Provider (IdP) Relying Party (RP) STS Client

8. U-Prove technology

11. Gov Coho Winery Name:Alice Smith Address:1234 Pine, Seattle, WA Over-21:true Name:Alice Smith Address:1234 Pine, Seattle, WA Over-21.:true This is an animated slide

12. Coho Winery Prove that you are over 21 and from WA Which adult from WA is this? Gov ? Name:Alice Smith Address:1234 Pine, Seattle, WA Over-21:true This is an animated slide

15. STS Client Identity Provider Relying Party IP

18. Scalability Security Privacy Offline Mixed Online Software Shared Hardware Anonymity Pseudonymity Full identification One technology to meet the desired levels of security, privacy, and scalability

19. U-Prove CTP

21. Integration with Microsoft products

23. E-Book OKS Feedback Windows CardSpace 2.0 2. Prove registered student, view e-book online 3. Leave anonymous feedback OKS Registration German nPA card 1. Register online, get student information card

24. Register the U-Prove WIF Extension in the application web.config … … … …

25. Use PowerShell to setup the server # Enable the EveryoneScope Enable-ADFSRelyingPartyTrust -TargetName EveryoneScope # Adjust the lifetime of issued U-Prove tokens # Set-ADFSRelyingPartyTrust -TargetName EveryoneScope -TokenLifetime 11520 # Adjust the number of U-Prove tokens issued # Set-ADFSProperties -DisconnectedTokenCount 25 # Generate Issuer parameters and private key (valid for 5 years) Set-ADFSIssuanceParameters -Lifetime 1825.00:00:00.00 # Export signed Issuer parameters $ipLocation = "c:\users\public\issuance.xml" Export-ADFSIssuanceParameters -Path c:\issuerparams.xml # Update the information card to support for U-Prove tokens Update-ADFSInformationCard

26. Questions?

28. Enable more secure, identity-based access to applications on-premises and in the cloud from virtually any location or device Provide more secure, always-on access Provide more secure, always-on access Enable access from virtually any device Enable access from virtually any device Extend powerful self- service capabilities to users Extend powerful self- service capabilities to users Automate and simplify management tasks Automate and simplify management tasks PROTECT everywhere ACCESS anywhere INTEGRATE and EXTEND security SIMPLIFY security, MANAGE compliance Control access across organizations Control access across organizations Provide standards-based interoperability Provide standards-based interoperability

29. Identity and Access Management Secure Messaging Secure Endpoint Secure Collaboration Information Protection

30. SIA321 |Business Ready Security: Exploring the Identity and Access Management Solution SIA201 |Understanding Claims-Based Applications: An Overview of Active Directory Federation Services (AD FS) 2.0 and Windows Identity Foundation SIA302 | Identity and Access Management: Centralizing Application Authorization Using Active Directory Federation Services 2.0 SIA303|Identity and Access Management: Windows Identity Foundation and Windows Azure SIA304 | Identity and Access Management: Windows Identity Foundation Overview SIA305 | Top 5 Security and Privacy Challenges in Identity Infrastructures and How to Overcome Them with U-Prove SIA306 | Night of the Living Directory: Understanding the Windows Server 2008 R2 Active Directory Recycle Bin SIA307 | Identity and Access Management: Deploying Microsoft Forefront Identity Manager 2010 Certificate Management for Microsoft IT SIA318 | Microsoft Forefront Identity Manager 2010: Deploying FIM SIA319 | Microsoft Forefront Identity Manager 2010: In Production SIA326 | Identity and Access Management: Single Sign-on Across Organizations and the Cloud - Active Directory Federation Services 2.0 Architecture Drilldown SIA327 | Identity and Access Management: Managing Active Directory Using Microsoft Forefront Identity Manager SIA01-INT | Identity and Access Management: Best Practices for Deploying and Managing Active Directory Federation Services (AD-FS) 2.0 SIA03-INT | Identity and Access Management: Best Practices for Deploying and Managing Microsoft Forefront Identity Manager SIA06-INT | Identity and Access Management Solution Demos SIA02-HOL | Microsoft Forefront Identity Manager 2010 Overview SIA06-HOL | Identity and Access Management Solution: Business Ready Security with Microsoft Forefront and Active Directory Red SIA-5 & SIA-6 | Microsoft Forefront Identity and Access Management Solution

31. Learn more about our solutions: http://www.microsoft.com/forefront Try our products: http://www.microsoft.com/forefront/trial

32. www.microsoft.com/teched www.microsoft.com/learning http://microsoft.com/technet http://microsoft.com/msdn

34. Sign up for Tech·Ed 2011 and save $500 starting June 8 – June 31 st http://northamerica.msteched.com/registration You can also register at the North America 2011 kiosk located at registration Join us in Atlanta next year