Azure Active Directory Business-to-Consumer (commonly called Azure B2C) is an important business solution for systems that need to authenticate end users to a web/mobile application using a white-labeled experience. Azure AD B2C provides an easy identity system as a service with pay-as-you-go pricing options. Who uses Azure AD B2C? If you have a solution where […]
Posts Tagged ‘identity’
Considering an Azure Active Directory Hybrid Identity Solution?
Identity solutions can be complicated, especially with the rising popularity of consumer-based devices and cloud SaaS applications in the corporate space. Microsoft recognizes this, and to help, they’ve put together the Hybrid Identity Design Considerations Guide. According to Microsoft, “[This guide] will help you to understand how to design a hybrid identity solution that best […]
Identity Management in Office 365
Identity and authentication management is the most crucial component of any migration to Office 365. Office 365 uses the cloud-based user authentication service Azure Active Directory to manage users and offers three identity models: cloud-only, synchronized, and federated. It is important to carefully consider which identity model to use, as well as the cost and […]
Office 365 – Why You Need to Understand ImmutableID
As part of planning for your identity with Office 365, it’s important to understand the concept of the “ImmutableID”. By definition, “immutable” means “unable to be changed” which should be sufficient warning that this is something you need to take time to plan properly. In spite of your planning, your organization could become involved in […]
Planning for Externalizing Authentication in SharePoint 2010: Part 1 – Introduction
Since the beginning of 2011, I’ve had the good fortune of being involved with several projects involving the claims authentication capabilities introduced in SharePoint 2010. The scope of these efforts have ranged from small proof-of-concept demonstrations to large Internet and Intranet production deployments. Some involved custom built Security Token Services (STS) and others relied on […]
UPDATED: Adding an OpenID Claims Provider for AD FS 2.0 to Extend Access to SharePoint 2010
NOTE: This blog is based on a post originally written in January of 2010 when both SharePoint 2010 and AD FS 2.0 were in Release Candidate stage. The version you are reading here has been updated it to correct some important omissions related to the RTW bits. ======================================================== In my previous post, I demonstrated how […]
UPDATED: How To Add ADFS 2.0 as a Federated Identity Provider in SharePoint 2010
NOTE: This blog is based on a post originally written at the end of 2009 when both SharePoint 2010 and AD FS 2.0 were in Release Candidate stage. The version you are reading here has been updated it to correct some important omissions related to the RTW bits. ======================== One of the most intriguing of […]
Sliding Sessions with SharePoint 2010 and Claims
Back in June 2010, Vittorio Bertocci posted a method to implement sliding sessions with Windows Identity Foundation (WIF) on his blog. While the article addresses ASP.NET applications configured to use WIF, Vittorio mentions that SharePoint 2010 implements sliding sessions for Forms authentication more or less out-of-the-box. Sadly this is not the case for situations where […]
Sign into SharePoint 2010 with Facebook using a custom STS
In an earlier post, I demonstrated how you can use Windows Azure ACS v2 as a Trusted Identity Provider to SharePoint 2010. One of the interesting options that ACS v2 provides is sign-in using Facebook. Using social media as a means to provide single sign on with SharePoint has always been an interest of mine […]
SharePoint and Identity Management – Part 2 of 3
So last week we briefly touched on the characteristics of a good IdM solution or at least an environment that was IdM hygienic. Some of those characteristics included the following: View, create, modify, and delete users Change passwords Add or delete a user in a security group Approve or reject requests Delegate all permissions This […]
PowerPoint Slides for SharePoint Saturday Twin Cities
I just uploaded my deck for the presentation I’ll be giving tomorrow, October 2 on Claims Authentication. Download here: SPS Twin Cities – Claims The deck is around 50 MB in size due to the demo videos embedded within. Since I’m presenting live, they’re without sound. I plan on re-recording them with sound later this […]