virtual techdays INDIA │ 9-11 February 2011 virtual techdays AppFabric Futures – Access Control Service Niraj Bhatt │ Windows Azure MVP

 Security Challenges  Developer  IT Ops  Business  Claims Based Identity  IP, RP and FP  WIF, ADFS, ACS  Demos virtual techdays INDIA │ 9-11 February 2011 S E S S I O N A G E N D A

virtual techdays INDIA │ 9-11 February 2011 Security Challenges How many of you love login screens?

virtual techdays INDIA │ 9-11 February 2011 Security Challenges Developer Challenges Applications are identity prisoners

virtual techdays INDIA │ 9-11 February 2011 Security Challenges IT Pro Challenges  Strategic Application  40,000+ Users  5000 Concurrent Users  TBs data and growing  No NLBs No Clusters  SQL 2000  ASP / ASP.NET 1.1 – In Proc Session Cutting 80% of Ops issues How ??? Cutting 80% of Ops issues How ???

virtual techdays INDIA │ 9-11 February 2011 Security Challenges IT Pro Challenges Option A Option B

virtual techdays INDIA │ 9-11 February 2011 Security Challenges Business Challenges – ABC Corp  Alice wants to sell ABC’s bikes  Signs agreements on behalf of her bike’s shop  Sends a list of her employees who can make purchase  ABC issues Username / Password for the all on the list

virtual techdays INDIA │ 9-11 February 2011 Security Challenges Business Challenges – ABC Corp Employee at Alice’s shop

virtual techdays INDIA │ 9-11 February 2011 Security Challenges Business Challenges – ABC Corp No value addition for past 6 months… I was promised a Salary hike after 6 months FIRES  Multiple Suppliers  Multiple Agreements  Multiple Lists  Multiple Logins  Multiple Policies

virtual techdays INDIA │ 9-11 February 2011 Security Challenges

virtual techdays INDIA │ 9-11 February 2011 Learning from other disciplines

virtual techdays INDIA │ 9-11 February 2011 Learning from other disciplines

virtual techdays INDIA │ 9-11 February 2011 Learning from other disciplines

virtual techdays INDIA │ 9-11 February 2011 Learning from other disciplines

virtual techdays INDIA │ 9-11 February 2011 Learning from other disciplines

virtual techdays INDIA │ 9-11 February 2011 Learning from other disciplines

virtual techdays INDIA │ 9-11 February 2011 Lessons learned ???  Always carry your license (age proof) to the beer bar  Relying on a trusted External Entity (Identity Provider) for  Authenticating users  Providing user attributes (claims)  Saves us from Identity nightmares

virtual techdays INDIA │ 9-11 February 2011 IP, RP, Tokens, WIF, ADFS

virtual techdays INDIA │ 9-11 February 2011 virtual techdays DEMO Outsourcing authentication to Identity Provider (STS)

virtual techdays INDIA │ 9-11 February 2011 Access Control Service - Federation Provider

virtual techdays INDIA │ 9-11 February 2011 virtual techdays DEMO Using Access Control Service as a Federation Provider

 Vittorio Bertocci   MSDN Article  Re-Introducing the Windows Azure AppFabric Access Control Service  AppFabric Labs & Tools      virtual techdays INDIA │ 9-11 February 2011 References

virtual techdays INDIA │ 9-11 February 2011 Thank you 23