Windows Azure Access Control Service overwies

1. Access Control Service
Pavlo Revenkov
EPAM Cloud Computing Competency Center
Email: pavlo_revenkov@epam.com
Habrahabr: habrahabr.ru/users/risingstar/
Skype: rp_risingstar

2. Arnold
Schwarzenegger
Token
Arnold
Schwarzenegger
Male
65
Surname
Sex
Age
Name
Claims
Certificate
What is token? 2

3. User
Relying
party
application
Token?
Federation
provider
Yes
Google
Facebook
Active
Directory
No
Token
Identity providers
Access Control Service
3

4. Federation
provider
Identity
Provider
IP-TokenFP-Token
ACS
Rule Engine
JWT
SAML 1.1
SAML 2.0
SWT
Google
Facebook
Yahoo
Active
Directory
ACSClaim
Rule
Language
4Token lifecycle

5. 5Benefits
• Your application interacts only with Access Control Service
• No need to implement your own authentication mechanism
• Transparent integration with existing Active Directory infrastructure
• Custom rule engine for claims transformation

6. 6Components
Windows Identity Foundation SDK:
• Application
• Server
AD FS Role Services:
• Server

7. 7Protocols
Windows Azure Access Control Service supports the following
protocols:
• WS-Trust
• WS-Federation
• OpenID 2.0
• OAuth 2.0
• OAuth-WRAP

8. 7Demo

9. Authentication with Access Control Service
 https://www.windowsazure.com/en-us/develop/net/how-to-guides/access-
control/
Single Sign-On from Active Directory
 http://www.microsoft.com/en-us/download/details.aspx?id=13789
References 8

10. 9Questions?