Cloud Identity & Access Control Services Cloud Computing Soup to Nuts Mike Benkovich Microsoft Corporation btlod-74
Caching CDN Service Bus Reporting Data Sync Azure Connect Identity HPC Additional Services ComputeStorageDatabase
Who are you?
Really?
Can you prove it?
Identity in the cloud
Browser Identity Provider Access Control Application 3. Login 5. Redirect to AC service 10. Validate Token 1. Request Resource 2. Redirect to Identity Provider 4. Authenticate & Issue Token 6. Send Token to ACS 7. Validate Token, Run Rules Engine, Issue Token 8. Redirect to RP with ACS Token 9. Send ACS Token to Relying Party 11. Return resource representation
CustomerId%3d31415%26Issuer%3dhttps%253a%252f%252fstringrever salinc.accesscontrol.windows.net%252f%26Audience%3dhttp%253a%25 2f%252flocalhost%252fprocessstring%26ExpiresOn%3d %26 HMACSHA256%3dI5g66yaiECux9IQ8y7Ffm2S1p%252bAXF73HWfzSNPy PLOE%253d
demo Configuration
ACS + Web demo
ACS + Mobile demo
Providers demo
Summary