1.  Justin Smith Sr. Program Manager Microsoft Corporation BB28

5. What are the 1 st two questions an application has to answer?

7. Your Customers Your App Msg WF.NET Access Control Service Live ID Users XYZ Domain Users Data Who is the caller? What can they do? Web

9. NOTE: The Service Bus and the Workflow Service share code for token processing

11. Your Access Control Service Account (Managed STS) Your Access Control Service Account (Managed STS) Relying Party (Your App) Relying Party (Your App) 2. Send Claims 4. Send Token (output claims from 4) 5. Send Message w/token 0. Cert|Secret exchange; periodically refreshed Requestor (Your Customer) Requestor (Your Customer) 1. Define access control rules for a customer 6.Claims checked in Relying Party 3. Map input claims to output claims based on access control rules

12. Justin Smith

23. Storage Data Model Rule Processing STS Portal Rule Mgmt

24. Security Token Service Custom Handlers, Authenticators, Policies … IDFX SOAP Client HTTP Client Internet WS-Trust WS-Federation (Passive) Security Token Service Custom Handlers, Authenticators, Policies … IDFX STS Custom Handlers, Authenticators, Policies … “Geneva” Framework WCF Front-End

25. Foo Account Container Foo Rule Container 1 Scopes Scope 1 ptr Scope 2 ptr Scope N ptr Scope 1 Rule 1 Rule 2 Foo Rule Container N Scope N............ Foo Rule Container 2 Scope 2 Access Control Service Controlled Authorities in SQL Server Data Services

29. Please fill out your evaluation for this session at: This session will be available as a recording at: www.microsoftpdc.com

31. © 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.