Solution SusQtech (Winchester, VA) SharePoint MVP since 2007 Working with SharePoint since 2001 Work on all types of deployments Dream about.

Slides:

Advertisements

Similar presentations

Active Directory Federation Services How does it really work?

Advertisements

 Jan Alexander Program Manager Microsoft Corporation BB43.

 Rich Randall Development Lead Microsoft Corporation BB44.

FI-WARE Testbed Access Control temporary solution.

SharePoint Apps for IT Pro

Key Point: Federation relationships are based on trust.

SharePoint-hostedAutohostedProvider-hosted All components are deployed to SharePoint Only the wrapper for the app is deployed to SharePoint Separate.

 Lynn Ayres Program Manager Identity Services  Tore Sundelin Program Manager Identity Services BB29.

SharePoint 2010 Business Productivity: What's new for Developers in Microsoft SharePoint 2010 Matthew McDermott, MVP Aptillon, Able Blue

0 Who Are You and What Do You Want? Working with Oauth in SharePoint 2013 Eric Shupps SharePoint MVP.

GRDevDay March 21, 2015 Cloud-based Identity for Applications.

Silver SponsorsGold Sponsors Bronze Sponsors SharePoint App Model Redefine your SharePoint Customisation Erwin Tsai SharePoint Solution Architect Techfly.

Every effort has been made to make this seminar as complete and as accurate as possible but no warranty or fitness is implied. The presenter, authors,

Managing Identity and Permissions

Conditional access DirectAccess & automatic VPN Desktop Virtualization.

SIM205. (On-Premises) Storage Servers Networking O/S Middleware Virtualization Data Applications Runtime You manage Infrastructure (as a Service)

Troubleshooting Federation, AD FS 2.0, and More…

Fraser Technical Solutions, LLC

SharePoint-Hosted App Provision an isolated sub web on a parent web (separate domain) Reuse web elements (lists, files, out-of-box web parts) No.

App development in SharePoint 2013 LIVE Introducing Cloud App Model Cloud-hosted Apps Experiences from the Field.

SIM402. Kerberos, NTLM, Basic, Digest, Forms?

Every effort has been made to make this seminar as complete and as accurate as possible but no warranty or fitness is implied. The presenter, authors,

Familiar Toolsets Embracing Web standards to provide developers choice and flexibility.

SPC204 Security Problems in SharePoint 2010 Authentication and Authorization.

Share easilyShare responsibly Share with anyone.

Office 365 Platform Flexible Tools App Manifest Web Page HTML/CSS/JS App.

Datacenter LOB web service LOB app Partner Mobile Device.

First Look Clinic: What’s New for IT Professionals in Microsoft® SharePoint® Server 2013 Sayed Ali (MCTS, MCITP, MCT, MCSA, MCSE )

Troubleshooting Federation, AD FS 2.0, and More…

IT Unity Webinar Series September 2015 Using Azure Active Directory to Secure Your Apps.

Module 5 Configuring Authentication. Module Overview Lesson 1: Understanding Classic SharePoint Authentication Providers Lesson 2: Understanding Federated.

SharePoint Security Fundamentals Introduction to Claims-based Security Configuring Claims-based Security Development Opportunities.

External user invited This creates invitation in Access Request List Invitation sent to guest with invitation URL Guest clicks URL. Verification.

Aaron Skonnard & Keith Brown Cofounders, Pluralsight SESSION CODE: ASI308 Programming AppFabric: Moving.NET to the Cloud.

Security Design with Claims- Based Authentication Israel Vega, Nathan Miller OSP431.

App Manifest Web Page HTML/CSS/JS APP SharePoint App Web SharePoint Host Web Windows Azure Websites SharePoint Host Web Your hosted site SharePoint.

Cloud Identity & Access Control Services Cloud Computing Soup to Nuts Mike Benkovich Microsoft Corporation btlod-74.

Using Claims based authentication with SharePoint

Sofia Event Center November 2013 Sharepoint 2013: Applied Architecture from the Field (V3) Tihomir Ignatov Senior Consultant Microsoft Corporation.

Brian Puhl Principal Technology Architect MSIT Identity & Access Management Microsoft Corporation SESSION CODE: SIA302.

Adxstudio Portals Training

Securing Angular Apps Brian Noyes

Windows 8 Application Microsoft Word with an app for Office Internal O365 SharePoint Site Windows Azure Web Sites Windows Azure Workflow Service.

Linus Joyeux Valerie Alonso Managing consultantLead consultant blue-infinity (Switzerland) Active Directory Federation Services v2.

SAML Token Claims Based Identity SAML Token Claims Based Identity SPUser.

SAML Token Claims Based Identity SAML Token Claims Based Identity SPUser.

The Kirk Evans + Israel Vega, Jr $wa = Get-SPWebApplication $arguments = New-Object Microsoft.SharePoint.Administration.SPWebApplication+SPMigrateUserParameters.

steve plank “planky” microsoft connecting your private and public clouds with adfs

Slavko Kukrika MVP Connect Windows 10 to the Cloud – Cloud Join.

Alex Thissen | Achmea Designing and implementing a claims-based architecture Alex Thissen | Achmea Claim typeValue

Authentication methods SharePoint Web Application Windows integrated Membership & Role Providers Web SSO Access control Roles protected Anonymous.

Networks ∙ Services ∙ People Jean Marie THIA GN4-1 Symposium, Vienna A case study GÉANT AuthN / AuthZ 9 march 2016 Solutions Architect -

Microsoft Ignite /20/2017 9:04 PM

SharePoint Authentication and Authorization

Stop Those Prying Eyes Getting to Your Data

5/13/2018 © 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks.

Introduction to Windows Azure AppFabric

Windows Azure AppFabric

SharePoint Cloud hosted Apps

Integrating Microsoft SharePoint 2010 with Windows Azure

Azure AD Application Proxy

Agenda OAuth Concepts Programming OAuth.

ACS Deployment Scenarios

SharePoint Online Authentication Patterns

Office 365 Development.

Building on the Microsoft Graph: 0 - App in 60 minutes

CSG, Power BI & Embedded.

Developing for Windows Azure

Western Mass Microsoft Technology Users Group

Presentation transcript:

Solution SusQtech (Winchester, VA) SharePoint MVP since 2007 Working with SharePoint since 2001 Work on all types of deployments Dream about SharePoint….Honestly sometimes I do I like to “hack” stuff

1.Resource Requested 2.AuthN Request / Redirect 3.AuthN Request 4.Security Token 5.Security Token Request 6.Service Token 7.Resource Request w/Service Token 8.Resource Sent Identity Provider Security Token Service aka IP-STS SharePoint aka RP

Identity Issuer Claims

Transformation Augmentation In Out In Out Identity Platform Sent Claims Federation Gateway SharePoint SP Security Site Access Add Claims Claims Mappings

i:0#.f|membershipprovider|user Identity Claim Reserved Forms Type: String User Login Name Account Provider Name

i:0#.w|domain\user Identity Claim Reserved Windows Type: String User Login Name Account

Provider Name Identity Claim Reserved Trusted Identity Type: String Type

1.Resource Requested 2.Detects Hosted App 3.Signed Token Returned 4.iFrame Rendered with Signed Token 5.Request Made for Hosted Web App 6.Context Token Validation / Client Secret Issued 7.Cache Access Token 8.Token Issued with Code / Resource Retrieved STS (Azure ACS) SharePoint Hosted Web

MySPC