1.  Kim Cameron Distinguished Engineer Microsoft Corporation BB11

5. Relationship Claims Provider (Security Token Service) Claims Provider (Security Token Service) 2. Get claims 3. Send claims 1. Require claims SUBJECT Application (requires Claims) Application (requires Claims)

8. Microsoft Services Identity Backbone YOUR CUSTOMER YOUR Application YOUR Application ? THEIR PARTNER Active Directory Active Directory Active Directory Active Directory

9. Claims Microsoft Services Identity Backbone Active Directory Active Directory Active Directory Active Directory YOUR Application YOUR Application “Geneva” Framework “Geneva” Server Enterprise Identity Backbone

10. Microsoft Services Identity Backbone Active Directory Active Directory Active Directory Active Directory “Geneva” Server Enterprise Identity Backbone User Database User Database “Geneva” Server Third Party STS YOUR Application YOUR Application “Geneva” Framework

11. Microsoft Services Identity Backbone Cloud Applications and Developer Services Active Directory Active Directory “Geneva” Server Third Party STS User Database User Database Microsoft Federation Gateway Microsoft Services Identity Backbone

12. Cloud Applications and Developer Services Active Directory Active Directory Microsoft Federation Gateway “Geneva” Server Microsoft Services Identity Backbone Third Party STS User Database User Database Live ID Managed Domains Managed Domains Consumers

13. Microsoft Services Identity Backbone Cloud Applications and Developer Services Active Directory Active Directory Microsoft Federation Gateway Microsoft Services Identity Backbone Third Party STS User Database User Database Live ID Managed Domains Managed Domains Consumers Active Directory Active Directory “Geneva” Server Microsoft Services Connector

14. Microsoft Services Identity Backbone Active Directory Active Directory Microsoft Services Connector Microsoft Services Identity Backbone Third Party STS User Database User Database Live ID Managed Domains Managed Domains Consumers Active Directory Active Directory “Geneva” Server YOUR Application YOUR Application “Geneva” Framework Microsoft Federation Gateway

15. Microsoft Services Identity Backbone Active Directory Active Directory Microsoft Services Connector Microsoft Services Identity Backbone Live ID Managed Domains Managed Domains Consumers Active Directory Active Directory YOUR Application YOUR Application “Geneva” Framework Microsoft Federation Gateway

16. Microsoft Services Identity Backbone Live ID Managed Domains Managed Domains Consumers Active Directory Active Directory “Geneva” Server YOUR Application YOUR Application “Geneva” Framework User Database User Database Third Party STS Microsoft Federation Gateway

17. Microsoft Services Identity Backbone Active Directory Active Directory Microsoft Federation Gateway Microsoft Services Connector Microsoft Services Identity Backbone Live ID Managed Domains Managed Domains Consumers Active Directory Active Directory “Geneva” Server YOUR Application YOUR Application “Geneva” Framework.Net Access Control Service

18.  Vittorio Bertocci Architect Evangelist Developer and Platform Evangelism

19. Microsoft Services Identity Backbone Active Directory Active Directory User Database User Database Selected OpenID Provider Selected OpenID Provider (Identity Backbone Pilot) Microsoft Federation Gateway “Geneva” Server YOUR Application YOUR Application “Geneva” Framework.Net Access Control Service Third Party STS Third Party STS YOUR Application YOUR Application Third Party Framework HealthVault

20. Microsoft Services Identity Backbone Active Directory Active Directory Any STS Microsoft Services Identity Backbone YOUR Web App YOUR Web App “Geneva” Framework YOUR Web App YOUR Web App Live Framework YOUR Web App using OpenID YOUR Web App using OpenID Microsoft Federation Gateway Live ID Managed Domains Managed Domains Consumers

22. RELATIONSHIP Identity Selector (where appropriate) Application (In cloud or on-premises) Application (In cloud or on-premises) Claims Provider “Geneva” Framework Live Framework Windows CardSpace “Geneva” Active Directory “Geneva” Server Microsoft Services Connector Live ID Microsoft Federation Gateway.Net Access Control Service.Net Access Control Service Software Services Third Party Frameworks Third Party Frameworks Third Party Services Third Party Servers Third Party Identity Selectors Get claimsRequire claims Return claims Require claims

23. .Net Access Control Service Microsoft Federation Gateway Microsoft Service Connector Software Services “Geneva” Server Live Identity Services NowH2 CY 2008H1 CY 2009H2 CY 2009 Beta 1 Beta 2 RTM CTP Beta RTM OpenID Beta In Production Beta 1 CTP Refresh “Geneva” Framework, CardSpace Beta 1 Beta 2 RTM Live Framework In Production OpenID RTM

27. Please fill out your evaluation for this session at: This session will be available as a recording at: www.microsoftpdc.com

28. © 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.