MSDN Magazine - December 2008 - (Page 82)

G e n e va F r a m e w o r k A New Framework For Building Claims-Based WCF Services michele Leroux Bustamante The “Geneva” Framework, formerly called “Zermatt,” is ASP.NET controls that simplify the creation of a Windows Cardthe code name for the new framework for building claims-based applications and services, and for implementing federated security scenarios. Features include the plumbing to build a custom Security Token Service (STS); a mechanism to require federated authentication from ASP.NET applications; and an object model that facilitates claims-based authorization for ASP.NET applications and Windows Communication Foundation (WCF) services. The Geneva Framework also includes features that support Windows CardSpace such as managed information card issuance and This article is based on a prerelease version of the “Geneva” Framework. all information is subject to change. This article discusses: • Implementing security with the Geneva Framework • wCF security • Claims-based security • Security Token Services Technologies discussed: windows Communication Foundation Code download: code.msdn.microsoft.com/mag200812Geneva 82 msdn magazine Space login experience. (Read more about Windows CardSpace in “Identity: Secure Your ASP.NET Apps and WCF Services with Windows CardSpace” at msdn.microsoft.com/magazine/cc163434.) Clearly, the Geneva Framework spans the breadth of security features, but at its core is claims-based security. While WCF has always had native support for a claims-based security model, the Geneva Framework enhances this experience by simplifying access to claims at run time and providing a mechanism to support claims-based authorization in a manner that is consistent with the role-based authorization principals already available in the Microsoft .NET Framework. ASP.NET applications utilize the Geneva Framework for claims-based authorization features compatible with existing ASP.NET login controls that enforce role-based security. In this article I will focus on the value of implementing a claims-based security model, describe how to approach claims-based WCF services using the Geneva Framework, and discuss how this compares to the way in which WCF handles claims-based security without the Geneva Framework. Before you continue reading, I recommend that you take a look at the Geneva Framework white paper for developers, written by Keith Brown and Sesha Mani, at go.microsoft.com/fwlink/?LinkId=132485. This will provide you with an overview of the features in the Geneva Framework, as well as some background on claims-based security concepts, and explain how to enable these features in ASP.NET ap- http://msdn.microsoft.com/magazine/cc163434 http://go.microsoft.com/fwlink/?LinkId=132485 http://code.msdn.microsoft.com/mag200812Geneva

Table of Contents Feed for the Digital Edition of MSDN Magazine - December 2008

MSDN Magazine - December 2008 Contents Toolbox CLR Inside Out Advanced Basics Cutting Edge Patterns In Practice Team System Real-World WF Visual Studio OBA Tools SOA Data Access Geneva Framework Test Run Foundations Windows With C++ Going Places End Bracket

MSDN Magazine - December 2008

For optimal viewing of this digital publication, please enable JavaScript and then refresh the page. If you would like to try to load the digital publication without using Flash Player detection, please click here.