2. 2

3. 3

5. Who are you? What are you allowed to do? How should your experience be personalized? How do I get apps that are provably securable and manageable? How do I get apps that can work together in an architecture? The hardest job of app developer … The hardest job of IT architect Hardest job of compliance officer: common policy across silos

6. Reusable Claims-Based Identity

7. 7

10. Relationship Claims Provider 2. Get claims 3. Send claims 1. Require claims SUBJECT Application (requires Claims) Application (requires Claims)

11. 11 Claims Microsoft Services Identity Backbone Database Directory Enterprise Application Enterprise Application Federation Framework Federation Server Enterprise Identity Backbone

12. Claims Directory Identity Store Identity Store Cloud Application Cloud Application Claims API Claims API Claims Service Claims Service Claims Service Claims Service Cloud Service Identity Backbone Database Claims Service Claims Service Enterprise University

13. 13

14. Reusable Claims-Based Identity Microsoft Confidential14

15. Reusable Claims-Based Identity Microsoft Confidential15

16. Person’s need to traverse contexts Person’s need for “contextual separation”

17. Identity Provider Name:Alice Smith Address:1234 Pine, Seattle, WA D.O.B:23-11-1955 Name:Alice Smith Address:1234 Pine, Seattle, WA D.O.B.:23-11-1955 Relying Party

18. Identity Provider Relying Party Prove that you are over 21 and from WA Name:Alice Smith Address:1234 Pine, Seattle, WA D.O.B:23-11-1955 Which adult from WA is this? Over-21 proof ?

19. eID Birth certificate RP

20. 20

21. eID Dating site RP

22. 22

23. 23