1.  Rich Randall Development Lead Microsoft Corporation BB44

6. Application Server Security Token Service End User Claims Framework Your App 3. Read policy 5. Send claims 1.Establish relationship using metadata 2. Read policy trust 4. Get claims Identity Selector Client

11. Fabrikam Contoso Application Contoso STS Fabrikam STS Established Trust Fabrikam Contoso

13. Fabrikam Contoso Application Contoso STS Fabrikam STS Established Trust Fabrikam Contoso

15. <OBJECT classid=“CLSID:19916E01-B44E-4e31-94A4-4696DF46157B" name="CardSpaceToken“ CODEBASE=“http://microsoft.com/CSV2.exe#Version=10,10,1,12"> <PARAM NAME="issuer" VALUE="http://contoso.com/issue" > <PARAM NAME="tokenType" VALUE="urn:oasis:names:tc:SAML:1.0:assertion" > <PARAM NAME="requiredClaims" VALUE=" http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalide ntifier " >

16. Internet Explorer 7+ Federated Identity Client Service Native Client API (infocardapi2.dll) ObjectTag Extension (ActiveX Control) ObjectTag Extension (ActiveX Control) Identity Manager Card Store Client STS Local Store Local Store Sapphire Win32 GetToken() [native] Managed Application Native Client API (infocardapi2.dll) Managed Wrapper Class ? GetToken() [native] IdentitySelector.GetToken() WS-Trust and WS-Mex Client Control Panel Card and Ledger Management Federation Manager App code Credential Provider

18. App User Federated App PDC ExhibitorGame World Policy Claim: Email Policy Claim: Email

19. Claim: Admin Claim: User Geneva Identity Server Claims Store Claims Aware App Claim: Admin

22. Sharepoint Server Sharepoint Client CardSpace Service LSASS IE Credential Provider WinInet IIS Sharepoint LSASS FedSSP XML Token to Windows Token Translator

29. Beta 1 October 2008 Beta 1 October 2008 Beta 2 1st Half 2009 Beta 2 1st Half 2009 RTM 2nd Half 2009 RTM 2nd Half 2009

32. Please fill out your evaluation for this session at: This session will be available as a recording at: www.microsoftpdc.com

34. © 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.